cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted

HIPS Activity Log Not Updating

Jump to solution

Hello, everyone. I'm having an issue with the HIPS log not updating. I'm on Patch 11 and the issue is occuring on a Server 2012 R2 system.

 

I've tried uninstalling and reinstalling HIPS, reducing the log file size in the Client UI policy, and rebooting the systems.

 

Any suggestions? I have zero visibility into what HIPS and its firewall are doing.

1 Solution

Accepted Solutions
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 5

Re: HIPS Activity Log Not Updating

Jump to solution

You might have an issue where the HIPS services aren't running  (McAfee Host Intrusion Prevention lpc Service and McAfee Host Intrusion Prevention Service; HIPS may not be active, so no logging is generated), or possibly the "C:\ProgramData\McAfee\Host Intrusion Prevention\Event.log" file is corrupt and can't be written to (this is the file represented as the Activity log).

You might try deleting that file (stop the HIPS services first), then restart the HIPS services.

 

If that doesn't work , please open a Service Request with our McAfee Support team for further investigation; please include a full debug MER file for review.

View solution in original post

4 Replies
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 5

Re: HIPS Activity Log Not Updating

Jump to solution

Do you have the logging options enabled in the Activity log?  Make sure they are all enabled.

 

screenshot.jpg

  • Traffic Logging:
    • Log all blocked
    • Log all Allowed
  • Filter Options:
    • Traffic
    • Intrusions

 

If you enable HIPS debug logging (via policy or registry), you should still see firewall traffic in the debug Firesvc.log file (although it will be more detailed than the Activity log).

Highlighted

Re: HIPS Activity Log Not Updating

Jump to solution

Yes, I have all boxes checked just like in your screenshot. Any ideas on how to get the Activity log to work again?

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 5

Re: HIPS Activity Log Not Updating

Jump to solution

You might have an issue where the HIPS services aren't running  (McAfee Host Intrusion Prevention lpc Service and McAfee Host Intrusion Prevention Service; HIPS may not be active, so no logging is generated), or possibly the "C:\ProgramData\McAfee\Host Intrusion Prevention\Event.log" file is corrupt and can't be written to (this is the file represented as the Activity log).

You might try deleting that file (stop the HIPS services first), then restart the HIPS services.

 

If that doesn't work , please open a Service Request with our McAfee Support team for further investigation; please include a full debug MER file for review.

View solution in original post

Highlighted

Re: HIPS Activity Log Not Updating

Jump to solution

Deleting the Event.log file and restarting the services fixed it. Thank you!

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community