delete suppression via esmc

Article:TECH179459  |  Created: 2012-01-20  |  Updated: 2013-08-20  |  Article URL
Article Type
Technical Solution



Problems to delete suppression(s) via esmc commandline


"No suppression with the same message, name, info and agent combination exists"


esmc console


You will need to check for exact parameters that you have to use to delete a specific suppression.
All parameters that are set (<> * or (all)) of following type:
-k   :   Message Code
-n   :   Name
-i   :   Info
-a   :   Agent
needs to be set in the delete statement.

delete suppression  [-k <msg_code>] [-n <name>] [-i <info>] [-a <agent>] <policy_name> <module_name> <os_type>




You would like to delete a suppression for a specific agent called "".

Verify which fields are populated:

esm> show suppression -a "" -l
Suppression #1
  Policy: test
  Module: Network Integrity
  Operating System: WIN2003
  Message Code: (all)
  Name: 1026 TCP
  Info: PID: 1620, Process Name: inetinfo.exe

To delete this specific suppression use:

esm> delete suppression -n "1026 TCP" -i "PID: 1620, Process Name: inetinfo.exe" -a "" "test" "Network Integrity" "WIN2003"

As Message Code is not specified: (all), it is not used in delete statement (no -k switch).


Article URL

Terms of use for this information are found in Legal Notices