How to display events of only one IPS in Security Monitor?

Hello,
i searched the forum with no result. I have CW 2.2 with IDSMC 2.1. I got two IPS and 2 IDSM-2 (4.x is in production / 5.x is in test) which have all their four interfaces sniffing in different network segments. Now i am flooded by the thousands of messages from the internet with no possibilty to just concentrate my view on the events generated on only one special interface of a single IPS.
To temporarily focus only one one interface of a single IPS how can i filter the events in Security Monitor to only display the events of a this device and a single interface?
This would be extremly helpfull for to simulate attacks in an test environment with shuning/blocking. I have rare possiblities to set up a second CW IDSMC on another machine. And after all, i would appreciate to focus (filter) in that way for later examining my network to tune signatures and events.
Furthermore, on IEV 4.1 i was able to get a real time dashboard showing 'real time' events. I did not see this functionality for IPS 5.x and IDSMC. How can i view real time data there to see my networks reaction to simulated attacks.
Any ideas how to only display only wanted data in Security-Monitor?
Thanks in advance, Gerhard

As far as I know, you cannot display the events of only one IPS in Sec Mon.

Similar Messages

How to use Mulitple DAQs with a single triggered event on only one of the DAQs

I have three PXI6115 and would like to tie all these to a single triggered event on one of the DAQs. I've scaned the examples and any assistance would be greatly appreciated....

TCjr,
Please refer to your other post:
How to use Multiple DAQs with a single triggered event on only one of the DAQs

How to display all data on one page in web app

Hello.
So I have web app JSF (IceFaces framework) + JBoss all Crystal Report working perfectly. So I have page with Crystal Report tags (e.g.
<bocrv:reportPageViewer reportSource="#{crystalReport.reportPath}" ...
in this report I have table with some data (data from DB) and I want to display this data on one page. Unfortunately now this data are moving to the next page and unfortunately I even donu2019t know how switch to the next page (I see only info e.g. 1with 2).
So how to display this data on one page if its impossible how to torn on pagination.

So I canu2019t do this, I canu2019t display all data on one page (until Iu2019m using JSF tags)?
In JSF tags Iu2019m setting only path to file. In my bean Iu2019m using u201CReportClientDocumentu201D object itu2019s easy way to load report file (u201Copenu201D method) and set parameters (u201CgetDataDefController().getParameterFieldController()u201D method) and also connect to data base (u201Clogonu201D method) but I havenu2019t this property u201CsetSeparatePages(boolean)u201D.
Maybe Iu2019m doing this wrong and there is a simpler way maybe I can use somehow u201CCrystalReportVieweru201D please give my any advice.

HT4969 How do I pull up only one specific calendar at a time (i.e. 'home calendar')?

How do I pull up only one specific calendar at a time on my iPhone (i.e. 'home calendar')?
Thanks!

In the calendar app, press the button in the upper left, "Calendars" and turn off/on the ones you want/don't want.

When I send a document for signature, two emails are sent to my client and myself. How do I make sure only one is sent?

When I send a document for signature, two emails are sent to my client and myself. How do I make sure only one is sent?

Hi Mark,
I checked your account at the backend and found many transactions sent out.
In order to narrow down the issue and search we need to know the specific transaction detail for which you faced this issue.
1. Signers email address
2. Senders email address
3.Name of the document
4. Date it was sent.
Do not post the information here. Send me a private message
Also let me know which 2 mails did you receive? Could you please share the subject line for the same.
Regards,
Rave

How to display field value only once in REUSE_ALV_GRID_DISPLAY

hi experts,
               i am using REUSE_ALV_GRID_DISPLAY, for alv outpur display.but i want one of the field in output ,not to display the value which is of same, it have to be displayed only once, I mean i have a number which contains multiple line items corresponding, here i want to display the field value only once when it is repeating , for the same header number, how can i achieve it

Hi,
check the sample code,
REPORT Z_ALV.
Database table declaration
TABLES:
sflight.
Typepool declaration
TYPE-POOLS:
slis.
Selection screen elements
SELECTION-SCREEN BEGIN OF BLOCK blk_1 WITH FRAME TITLE text-000.
SELECT-OPTIONS:
s_carrid FOR sflight-carrid.
SELECTION-SCREEN END OF BLOCK blk_1.
Field string to hold sflight data
DATA:
BEGIN OF fs_sflight ,
    carrid   TYPE sflight-carrid,      " Carrier Id
    connid   TYPE sflight-connid,      " Connection No
    fldate   TYPE sflight-fldate,      " Flight date
    seatsmax TYPE sflight-seatsmax,    " Maximum seats
    seatsocc TYPE sflight-seatsocc,    " Occupied seats
END OF fs_sflight.
Internal table to hold sflight data
DATA:
t_sflight LIKE
   STANDARD TABLE
         OF fs_sflight .
Work variables
DATA:
t_fieldcat TYPE slis_t_fieldcat_alv,
fs_fieldcat LIKE
         LINE OF t_fieldcat.
*START-OF-SELECTION
START-OF-SELECTION.
PERFORM get_data_sflight.            " Getting data for display
PERFORM create_field_cat.            " Create field catalog
PERFORM alv_display.
*&      Form create_field_cat
      Subroutine to create field catalog
      There is no interface paramete
FORM create_field_cat .
PERFORM fill_fieldcat USING   'Carrier Id'    'CARRID'   '2'.
PERFORM fill_fieldcat USING   'Connection No' 'CONNID'   '1'.
PERFORM fill_fieldcat USING   'Flight Date'   'FLDATE'   '3'.
PERFORM fill_fieldcat USING   'Maxm.Seats'    'SEATSMAX' '4'.
PERFORM fill_fieldcat USING   'Seats Occ'     'SEATSOCC' '5'.
ENDFORM.                                    "create_field_cat
*&      Form fill_fieldcat
      Subroutine to fill data to field column
     -->p_seltext      Column label
     -->p_fieldname    Fieldname of database table
     -->p_col_pos      Column position
FORM fill_fieldcat USING
                    p_seltext    LIKE fs_fieldcat-seltext_m
                    p_fieldname LIKE fs_fieldcat-fieldname
                    p_col_pos    LIKE fs_fieldcat-col_pos.
fs_fieldcat-seltext_m = p_seltext.
fs_fieldcat-fieldname = p_fieldname.
fs_fieldcat-col_pos    = p_col_pos.
APPEND fs_fieldcat TO t_fieldcat.
CLEAR fs_fieldcat.
ENDFORM.                    " fill_fieldcat
*&      Form get_data_sflight
      Subroutine to fetch data from database table
      There is no interface parameter
FORM get_data_sflight .
SELECT carrid
         connid
         fldate
         seatsmax
         seatsocc
    FROM sflight
    INTO TABLE t_sflight
   WHERE carrid IN s_carrid.
ENDFORM.                    " get_data_sflight
*&      Form alv_display
      Subroutine for ALV display
      There is no interface parameter
FORM alv_display .
CALL FUNCTION 'REUSE_ALV_LIST_DISPLAY'
    EXPORTING
      it_fieldcat   = t_fieldcat
    TABLES
      t_outtab      = t_sflight
    EXCEPTIONS
      program_error = 1
      OTHERS        = 2.
IF sy-subrc NE 0.
    MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
            WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
ENDIF.
ENDFORM.                    " alv_display
End of code

How do I group by only one column in a SELECT statement?

Hi everyone,
Here is my novice question:
I would like to run a query where I select (display) several columns from my table, yet group (categorize) by one of these columns.
For example:
SELECT A, B, COUNT(A)
FROM TableX
GROUP BY A
I realize now that this is not valid. My first question is why? Doesn't it make sense that you would want to group by only one of the columns? To me, it seems natural that you would most often want to categorize by one attribute, which is why it seems odd that this is not valid. I realize that I can remove column B, but I do want to display that info. I could also change the last statement to GROUP BY A, B to avoid errors, but this will also not display what I am looking for.
In addition to understanding why Oracle is set up this way, I guess I also need to know how I can legally accomplish this query, grouping by A but also displaying the values of B.
Thank you very much for your help!
Holly

Hi everyone,
Thank you for your responses... very interesting and useful. Since I came across inline views in my reading, I tried the approach recommended by g feng, although I am eager to try the other approaches too.
I ended up using an inner join simply to get more descriptive info. on the column that was being counted. With Y representing this second table, Y.B being the column containing the descriptive info., and A being the common key between X and Y, here is the simple code I came up with.
SELECT Y.B, V.*
FROM Y,
SELECT A AV, COUNT (*)
FROM X
GROUP BY A
) V
WHERE V.AV = Y.A
Does this seem correct... anything I need to watch out for?
Thanks again to everyone for your help!!
Holly

Counting (interneal timebase)events with only one counter

Hello,
i am using a PXI-6115 card. This card is external clocked with 8 MHz. But I want to measure only about every second. So I divided the external clock with the internal counter 0. This works fine.
Now my problem. Now I want to know the external clock rate. Is it possible to build a pulse period measurement with only one counter??
I thinking of counting internal timebase- pulses with counter 1 and to start and stop the counter 1 by the output of counter 0.
Is this possible and how??
Thanks for help, Ruediger

Yes, there's a way to measure pulse periods with a single counter. The trick is to perform a buffered period measurement and sum the periods. The size of the buffer will determine the quantization/roundoff error.
The source of this error is that you have no control over the initial phase relationship of your external clock and your internal timebase. There's a nominal ratio between the two frequencies, and you'd start by expecting ratio * (buffer size) total cycles counted.
However, your actual count must be an integer, so you'll get either the next-highest or next-lowest integer, but you can't predict or control which one.
Example: If you collect 1 period at 8 MHz using the internal 20 MHz timebase, you'll capture either 2 or 3 e
dges from your timebase, implying a measured frequency of either 10 MHz or 6.6667 MHz.
If you collect 1001 periods, you'll capture a total of 2502 or 2503 timebase edges, implying a measured frequency of either 8.0016 MHz or 7.9984 MHz.
Notes:
1. In many cases, you can set up for buffered event counting, using the internal 20 MHz clock as a source and your external 8 MHz as a gate.
The advantage is that the buffered values already represent cumulative time so you don't need to sum them.
A disadvantage would be that the internal 24-bit counter value will roll-over in less than 1 second at 20 MHz. I typically capture periods and then sum in software because I can convert to floating point between capture and sum if necessary to produce both high-resolution and long duration measurements.
2. You should typically ignore the very first value in the buffer and work only with the others. If you want to capture 1001 legitimate periods, size the buffer for at least 1002
-Kevin P.

How can I link to only one track on an album in the iTunes store?

I'm trying to link to a song and keep it seperate from the rest of the content on the album. The link generator is giving me a link to the song but it still brings up the rest of the album too. Is there anyway to isolate and link to only one track? Thanks!

Experience (of iPods) tells me that the 160GB Classic and the 120GB Classic are from the same "family" and should therefore behave the same way. (The nano is a different family and the Touch another family yet again.)
So, since my 160GB Classic can play one episode at time, your 120GB Classic should too. To achieve this, turn on *shuffle songs/albums.* No, I'm not joking!
With shuffle on the Podcasts will play one episode at time when you select an episode from the episode list. Be sure to turn on the shuffle from "within a song" or from the ettings menu. If you have shuffle displayed on the main menu and use that to start shuffling songs, it doesn't affect Podcasts. You will know it's set correctly because the display will show 1 of 1 instead of 1 of "X".
Phil

How to display F4 values in one field based on other field selection

Hi All,
How to hide a UI element (i.e Link to action) highlited for Normal User and display the same to super user.
Component Name : /SAPSRM/WDC_DODC_SC_GAF_C
2.Can i know how to display the entries in supplier field based on Product category selection.
Right now all the entries are getting displayed in the supplier field.
I want to display only entries based on Product category.
Search Help Name : BBP_BUPA_CLL_PARTNER
Component Name : /SAPSRM/WDC_DODC_SC_I_LIM
How to enhance the web dynpro component with the filtered values.
Regards,
Krish.

Hi Ashvin,
Thanks for the document. In the search help there is a standard FM which is getting executed.
Can i enhance that FM or should i copy and edit.
BBP_F4IF_SHLP_EXIT_CLL_PARTNER
If i creata a Z FM and make changes how to pass that values to my standard Component View UI Element.
If not then suggest me some alternative.
Regards,
Krish

OBIEE - answers - How to display to rows in one?

I have problem with QA_RESULTS table - exactly with correct display results
How can I display two rows in one?
Example:
data 1, name
2009-03-01, john
2009-03-05, john
2009-03-02, ann
2009-03-04, ann
I would like to see:
data 1, name , data 2
2009-03-01, john , 2003-03-05
2009-03-02, ann , 2009-03-04
Regards,
js

hi..
i don't think this can be done..
but try to put the name column in first place and in column properties mention suppression values.. as it won't repeat the values for each row...
keep your date column in second position.
so that it appears like.. for each name there would be 2 dates up and down
just try...

How to display two waveforms in one waveform chart?

hellow!anyone can tell me how to display two waveform together in one waveform chart? thanks!

Hello,
An easy way to tell how to make multi-plot charts and graphs is to hold your mouse over the chart/graph terminal on the block diagram and make sure Context Help (Help >> Show Context Help) is enabled. This screen will tell you how to connect the indicator for a multiple-plot display.
You might want to take a look at my attached screenshots of a working multi-plot chart.
Hope this helps!
Liz F
National Instruments
Attachments:
Multi-plot_chart.bmp ‏902 KB

How to share folder with only one person one same Mac

Could someone please remind me how I share a folder with one person I share my Mac with but not the others (we all have different profiles on the same machine...)
Thanks,
Michael

EddyS45 wrote:
My wife & I use the same iMac with different user accounts. How do we share one iTunes account on that computer. I tried moving the iTunes folder in music on my user account to shared user
Then hold Option and launch iTunes.
Select Choose library... and select the iTunes folder in /Users/Shared/ folder.

ToggleButtonBar - how to change color for only one button

I have a tooglebuttonbar (with 4 buttons) and I'd like to change the color of only one or two button according particular data. Is someone has experience to do that.
I try to do like that
var child:Button;
child = Button(tbbAction2.getChildAt(0));
child.setStyle('color', '#CC33CC');
But there's no effect. Thanks a lot.

I have a tooglebuttonbar (with 4 buttons) and I'd like to change the color of only one or two button according particular data. Is someone has experience to do that.
I try to do like that
var child:Button;
child = Button(tbbAction2.getChildAt(0));
child.setStyle('color', '#CC33CC');
But there's no effect. Thanks a lot.

How use two templantes with only one job ?

I have two templantes and want use with only one job.I use with input one xml data file !!
Is this possible?
Please Help!!
Thanks,
Bruno.

I probably missed this one earlier or felt that since it referenced an XML data file that I couldn't provide a definitive answer. I'm still not sure I can because we don't use XML for our data files, but use the "field nominated format". An expansion on Tammy's information: 1. use a multi-step job with each b task calling a different MDF. With this correction, it assumes that you either have access to set up the tasks/jobs yourself or can convince your Central administrator to do so. What happens is that TASKA is set up to reference FORMA and TASKB is set up to reference FORMB. Then a job is set up that causes both TASKA & TASKB to be ran. This will likely result in two different print files being sent to the printer. That may or may not be desirable, depending on whether your printer is set up to do something special between each print file (insert separator page, offset, whatever). Personally, I don't recommend this as it can quickly cause an unnecessary proliferation of tasks and jobs (we print 100's of differing form combinations with a single job definition). 2. I can't really address this as I didn't even know that a single form could cause another to be called. I would expect that unless the "base" form (say it is FORMA) is to always print with the secondary form (FORMB) it is restrictive and has the potential to cause a proliferation of FORMA files for the various combinations that are to be printed. Maybe it is possible to have logic to check the value of a data field to control what forms get called. 3. If you pass the XML file through a translation step and then through the transformation agent (maybe it can be done in a single step) this should work. It does add another step to the job as well as requiring learning to use the transformation agent. Depending on the combination of forms to be printed, you might need a different translation definition for each one, or at the very least have a data field that you can check the value of to determine what ^form commands to put in the output file. 4. My recommendation is based on assuming an XML data file has the same capabilities as a field nominated file. Within a field nominated file are various print agent commands, including references to data as well as which forms are to be printed (and a whole bunch of other commands). An XML file should have the same features - I just can't say what they might look like. If your current data file has no "form" reference but depends on the job/task definition you might have to stick with option 1. If it has a "form" reference, then you just need to insert additional references for additional forms. Then it is up to the source of your data (or a transformation agent step) to specify which forms are to be printed. For example, in field nominated format, the file might look like: ^job XYZ additional parameters ^form FORMA.MDF ^field FIELD1 data ^field FIELD2 data ^form FORMB.MDF ^field FIELD1 data ^field FIELD3 data or it might look like the way our files look: ^job XYZ additional parameters ^global FIELD1 data ^global FIELD2 data ^global FIELD3 data ^form FORMA.MDF ^form FORMB.MDF As you can see in the first example, there is a reference to the form followed by all fields that go on it followed by another form reference with the fields that go on it. This particular method, using all "^field" commands for defining the data requires that data duplicated between the forms be duplicated. (Or, the use of some ^global commands like the following.) In the second example, all data is defined first using the "^global" command followed by all of the form references. This allows for the data to be defined only once. If there is something unique regarding a particular form the field can be ^global at the beginning or it can be ^field b after the ^form reference (similar to the first example). As previously mentioned, the XML file should have the same capability but in XML notation, something like the following (forgive me as it has been years since I took the XML class and don't use it in my daily work so the actual format could be wrong, not to mention the actual labels): <job name=XYZ,option=aaaa,option=bbbbbbb> <form name=FORMA.MDF> <field name=FIELD1, value=xxxxxxxxxxx></field> <field name=FIELD2, value="xxxxxxxxxxxxx"></field> </form> <form name=FORMA.MDF> etcetera </job> or maybe: <job name=XYZ,option=aaaa,option=bbbbbbb> <global name=FIELD1,value=xxxxxxxxxxxx></global> <global name=FIELD2,value="xxxxxxxxxxxxx"></global> etcetera <form name=FORMA.MDF></form> <form name=FORMB.MDF></form> </job> or even (but I doubt it): <job name=XYZ,option=aaaa,option=bbbbbbb> <globals> name=FIELD1,value=xxxxxxxxxxxxxxxx, name=FIELD2,value="xxxxxxxxxxxxxxx" </globals> <forms> name=FORMA.MDF, name=FORMB.MDF </forms> </job>

How to display events of only one IPS in Security Monitor?

Similar Messages

Maybe you are looking for