cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted

SEIM reports empty

Reports are empty and we need assistance to identify why this is the case, and to fix it. We are in the process of an audit cycle.
2 Replies
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: SEIM reports empty

Which version is the ESM on and what is the patch that has been applied?

Is the information you are trying to pull in the report showing up in the dashboard for the respective custom time?

ESM version can be obtained by executing ‘NitroGetVersion’ on the CLI.

Patch info can be obtained by using the below command:

cat /etc/NitroGuard/.patchinfo

Regards,

Prashanth B Pillai

Mcafee Technical Support 

Customer Success Group 

Highlighted

Re: SEIM reports empty

not sure about dashbard, please see below:

 

McAfee-ETM-5600 ~ # cat /etc/NitroGuard/.patchinfo

[patch_10.4.0_GA_patch_9]
version=10.4.0.9
date=Sun Dec 22 17:33:44 2019
sha=ca5cf4132545c2435610bb3a0a410dc78742f9aa
tag=patch_10.4.0_v9
timestamp=1577036024
description=Fix for bugs SIEM-11720 SIEM-11871 SIEM-11721 SIEM-11657 SIEM-11915 SIEM-11350 SIEM-12859 SIEM-11331 SIEM-13757 SIEM-12267 SIEM-12797 SIEM-12942 SIEM-13449 SIEM-13932 SIEM-12500 SIEM-13809 SIEM-13771: Active Flag button exists for Local ESM AND Some External APIs were not available AND Fixed and issue where after adding VM Storage drive size was 0 AND add support for @ and backslash within wmi ds user name AND Duplicate NSM Sensors AND ELM Search sometimes produces different results AND ESM sometimes unable to communicate with devices via SSH AND Rollout of policy sometimes misses several data sources AND caseGetCaseDetail sometimes does not return Notes or History AND Sometimes syslog data is mapped to different data sources AND Emails would not be sent under certain conditions for triggered alarms AND Error (ER15) displayed after user with limited privileges logs in AND Source IP and Source User might not be recorded on Internal Event when deleting events AND ELM search returns incorrect data AND ELM Archive Tab Not Retrieving All Packets AND Custom Displays Do Not Contain Devices AND Dashboard time distribution chart with stacking not updating
patch_file1=/var/www/html/console/apps/DASHBOARD/js/app.js -- 20b5d566ee5ea13d921fedb92dc72913bed47a93
patch_file2=/var/www/html/Application.swf -- 2d0c2a62dfd1ef0a7ae7be6876a277dd18a0fa92
patch_file3=/etc/tomcat/webapps/ROOT/WEB-INF/lib/esmapi.jar -- da5bb74971bbb834c83c9929cdada78b8798a33a
patch_file4=/etc/tomcat/webapps/ROOT/WEB-INF/api.xml -- b37c791fb15836b2d9b30636a30a5bcd92624416
patch_file5=/usr/local/bin/GetVmVolumes -- 5f73e56db5ccd46ca66bd7243aba28308763d5b5
patch_file6=/usr/lib/perl5/site_perl/5.16.1/x86_64-linux-thread-multi/Nitro/SSHConfig.pm -- cec5aac807c18c09b18db9c6a030e8fe64c5c36c
patch_file7=/usr/lib64/libJobServer.so -- 753b7ce4f867d8e81fe2f13809c6d5d0e8f85d78
patch_file8=/usr/lib64/libESSDB.so -- 348b2df199b29cd2ba69da194aba76dfd13d79
McAfee-ETM-5600 ~ #

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community