Novell Sentinel Log Manager 1.0.0.5 Release Notes
15
no
vd
ocx
(e
n)
19
Fe
bru
a
ry
20
10
5.1 Known Issue in Sentinel Log Manager 1.0.0.5
Table 7
Known Issue in Sentinel Log Manager 1.0.0.5
5.2 Known Issues in Sentinel Log Manager 1.0
This section lists the known issues in Novell Sentinel Log Manager 1.0 Release.
Issue Number
Description
591895
Issue: After upgrading, events generated in Hot fix 4 is not displayed in
Hot fix 5 reports.
Workaround: This issue occurs because a machine upgraded to Hot fix 5
has events with two different values in their CollectorScript field. To
display the Hot fix 4 events in the Hot fix 5 report, do the following
1. Run a search query in the following format:
sev:[0 TO 5] AND (agent:”<non-HF4 agent value>” OR
agent:”<HF4 agent value>” )
2. Save the search as a report with type
Visualization
.
3. Select a corresponding template from the available templates.
You can use this report template to generate future reports.
For example, to create a new Cisco Firewall Event Count Trend Report:
1. Run the following search query:
sev:[0 TO 5] AND (agent:"Cisco Firewall" OR
agent:"Cisco_Firewall")
The CollectorScript value for events generated in Hot fix 4 is
Cisco_Firewall_
<Cisco Firewall Collector Version>
The CollectorScriot value for events generated in version other than
Hot fix 4 is
Cisco Firewall
<Cisco Firewall Collector
Version>
NOTE:
In the report query, exclude the collector version from the
query as it creates a dependency on the version of the collector.
This query returns all the Cisco Firewall events in the server.
2. Click
Save as Report
, then select type as
Visualization
.
3. Select the
All Vendors All Products Event Count Trend 6.1r1
template.
4. Specify a name, then click
Save
to save the file.
Now when you run the report, events generated in Hot fix 4 is also
included in the report.
