Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Contributor

How do I resolve this warning in Device & License Information?

Jump to solution

How do I resolve this warning in Device & License Information?

0 Kudos
1 Solution

Accepted Solutions
Highlighted
Employee
Employee
  1. Change the IP address of RXX.XX SmartEvent in the Security Management server GUI (SmartConsole) on the  RXX.XX SmartEvent server object.

  2. Change the IP address of the  RXX.XX SmartEvent in the WebUI on the server itself.

  3. Remove the old license from and add new to the corresponding new IP address of  RXX.XX SmartEvent.

  4. Complete SiC reset on the  RXX.XX SmartEvent object in the SmartConsole.

  5. Save changes and install the database to the Security Management server, Log server, and  RXX.XX SmartEvent server.

  6. Log into the  RXX.XX SmartEvent, into legacy SmartEvent GUI, remove the old correlation unit and add it again.
    Now it will have a new IP address defined.

  7. Install the SmartEvent Policy.

View solution in original post

6 Replies
Highlighted

Issue cpstat cpsead on smart event and find what is the problematic log server , in my experience most of the time restarting event services resolve the issue but it may be different on your case

0 Kudos
Highlighted
Contributor

hi buddy~

I think the smart event log server IP address is set incorrectly, how do I change it?

0 Kudos
Highlighted
Employee
Employee

Hello,


- Essentially you need to make sure that Smart Management Server can "talk" to the Smart Event Server. When you can see that they both can communicate to each other. When you can confirm that, restart the Smart Event server, make sure the connection stays stable and then check the Smart Event is receiving logs.

0 Kudos
Highlighted
Contributor

hi buddy~

I think the smart event log server IP address is set incorrectly, how do I change it?

0 Kudos
Highlighted
Employee
Employee
  1. Change the IP address of RXX.XX SmartEvent in the Security Management server GUI (SmartConsole) on the  RXX.XX SmartEvent server object.

  2. Change the IP address of the  RXX.XX SmartEvent in the WebUI on the server itself.

  3. Remove the old license from and add new to the corresponding new IP address of  RXX.XX SmartEvent.

  4. Complete SiC reset on the  RXX.XX SmartEvent object in the SmartConsole.

  5. Save changes and install the database to the Security Management server, Log server, and  RXX.XX SmartEvent server.

  6. Log into the  RXX.XX SmartEvent, into legacy SmartEvent GUI, remove the old correlation unit and add it again.
    Now it will have a new IP address defined.

  7. Install the SmartEvent Policy.

View solution in original post

Highlighted
Contributor

Thank you James Alliband

you so handsome~