IDSXML Collection is Delayed
Originally Published: 2007-11-06
Article Number
Applies To
Delay
IDSXML
RSA enVision
Issue
Sensor is sending alerts at a rate of 500
Resolution
If you notice an issue with delay on collection of IDSXML events it's due to the fact that the sensor is not sending more then 500 Alerts every time enVision sends a request and slowly it accumulates.
To work around it you can increase the IDSXML collection interval.
1) run %_envision%\database\cmd\startisql.com
2) type
update idsxmlServiceClientConfig set interval=10
3) Hit F5
4) Close the ISQL GUI
5) Restart the IDS XML service.
Related Articles
RSA Web Threat Detection - Delayed Transactions Not in Shard File for the Correct Hour 7Number of Views Delay in sending emails from RSA Identity Governance & Lifecycle 107Number of Views Monitoring scripts delayed when sent to remote syslog 27Number of Views In RSA Identity Governance & Lifecycle, a SQL exception error in the UI is encountered when saving Delay node on a Workflow 118Number of Views Archive Logs Using Archive Now 48Number of Views
Trending Articles
Downloading RSA Authentication Manager license files or RSA Software token seed records RSA Release Notes for RSA Authentication Manager 8.8 RSA Authentication Manager Patch Updates AFX Server remains in a 'Not running' State, afx status shows 'timed out waiting for AFX applications to start' and mule_e… Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory
Don't see what you're looking for?