Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

fix Security information Manager

Created: 03 Jun 2012 | 8 comments

Dear All

SIM having following troubles

How to fix this problems to display status "UP" replaced for "Unknow"

Comments 8 CommentsJump to latest comment

hungnqvn's picture

Dear 

i found the solution at link http://www.symantec.com/business/support/index?page=content&id=TECH163967

Solution

Verify or change Agent logging settings through the SSIM client:

  • Under the Agent Configurations > logging, verify the Agent Queue Statistics Report Interval number is not set below 30 seconds.  The default setting is 300.
  • Under Rules > Monitors, verify the System State Monitor is enabled and configured.

 After making any changes or if no problems were found, restart the simserver & statsvc services.

But i can't find where Agent Configuarations ? please help me

Thanks so much

hungnqvn's picture

Dear

I did following this guide, then i reset SIM Server and statsvc but not Ok

i don't know why ?

hungnqvn's picture

why haven't any one help me this problem ?

.Brian's picture

You're best bet may be to open a ticket with support.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Avkash K's picture

Hi,

If a Sensor has anything in the Execution Time field of the Sensor, for example the SEP State sensor is set to collect SEP State information once every 24 hours at midnite (00:00:01). If this is the case then most of the time the state of the Sensor shows as unknown in the Table view of the Visualizer but the Agent on the machine will appear as "Agent Up". Once the Sensor sends events as scheduled the Sensor will have a green check next to it for the next 10 to 15 minutes and then goes back to Unknown.

Ref: http://www.symantec.com/docs/TECH91178

 

Regards,

Avkash K

MegL's picture

The state collectors will show "unknown" except for when they are scheduled to collect. Overall, given the list of collectors that I can pick from the list, this looks like a time sync issue. Do you have NTP set up and properly configured on all your systems?  It looks like the SSIM and the agents/point products may be showing different times. 

Subhani's picture

Your visualizer might be broken. This happens if you have more than one nodes with the same Host Name or Same DNS Name .Kindly check this under Organization OU .Another thing is that EPS is shown as zero .apart from visualizer ,use other ways such as  Events ( top N by field) to confirm if you are receiving any events or not .