Security Monitor Events display incorrect time

I have a time issue between a 4240 sensor (5.0) and Security Monitor (2.1). The events in the sensor are correct but 7 hours off in Security Monitor, even though the VMS server understands the correct time (knows there are events in the last hour) but will not display them. After doing some research, it looks as though we needed to load CSCOids2.1.0-sol_SecMon_2_1_Service_Pack_1-6.tar right? Well I did, ran the perl script, everthing was successful. CiscoWorks shows the patch as being applied. Reloaded VMS and the sensor, and still I have what seems like a UTC problem (UTC offset always =0 yet time zone=arizona). Any suggestions?
Thanks!

Is the correct offset configured on the sensor?
Execute "show conf" and verify the value for the timezone offset. Remember that this is in minutes and not hours. If the timezone diffence is 7 hours then the value on the sensor should be 7hours*60minutes=420minutes.
Also use "show events" on the sensor to look at a few alerts on the sensor itself. It will report both the UTC/GMT time and the Local time. Verify that the offset between the 2 is correct on the sensor. (be sure to account for summertime/daylight savings time)

Similar Messages

  • Dashboard clock displays incorrect time for remote cities

    Hi all,
    Small issue here : I added a new clock in dashboard to display the time in Rabat, Morocco.
    Unfortunately the clock is an hour off (shows 10pm when it is actually 11pm there).
    I already asked the google friend, always the same answer : check your time zone in preferences, which I did.
    > My current location & time zone are correctly set (Brussels, Belgium CEST), time is correctly displayed for this location both on the desktop and in dashboard clock.
    > Tried allowing the system to determine my current time zone automatically, no change.
    > Date & time is set automatically via apple euro time server.
    Does anyone know what's wrong here? Something related to daylight saving time maybe? (seems odd but I ran out of ideas.)
    Thanks a bunch,
    Nicolas

    This same problem stared plaguing me as well yesterday (iPhone 5c), maybe a week after upgrading to iOS 8.3. I've tried everything (which isn't much, right?) to no avail. Among the symptoms were time and date wrong (of course) but also intermittent WiFi misbehavior (e.g., disconnects) and very sluggish response on the set Date & Time page (Settings : General : Date & Time)--when setting the "Set Automatically" slider from off to on or vice-versa it would often take many seconds to respond (and I'd swear the sliding circle looks a tiny bit elongated when stuck).
    Anyway, this morning I let the power drain normally and kept it that way for a few hours. I've now plugged it back in to charge and the time has been correct for the past 45 min. and counting, so this may be a remedy. I'll check back in later today with progress.

  • Why is my iPhone displaying incorrect time?

    Image should explain all.
    The time at the top is 8 hours behind. I can't correct it because when I go into Time, it's correct!
    Many thanks

    Hey there JonnyAustin,
    It looks like your phone is showing an incorrect time but it is set correctly in Settings. I would start with quitting all the running apps on the device:
    iOS: Force an app to close
    Double-click the Home button.
    Swipe left or right until you have located the app you wish to close.
    Swipe the app up to close it.
    When you have done that restart the device and test the issue again:
    iOS: Turning off and on (restarting) and resetting
    If the issue persits, I would next use the troubleshooting in the following article for additional assistance:
    iOS: Troubleshooting issues with date and time - Apple Support
    Thank you for using Apple Support Communities.
    Cheers,
    Sterling

  • Same calendar event displaying multiple times

    Hi, I currently see the same calendar event three times in different colors. I am utiling active sync and am on firmware 2.1. This started happening recently therefore I know this is not a firmware issue.
    I have blown away my account and re-established it. Anyone have any ideas.

    Hi, I currently see the same calendar event three times in different colors. I am utiling active sync and am on firmware 2.1. This started happening recently therefore I know this is not a firmware issue.
    I have blown away my account and re-established it. Anyone have any ideas.

  • VMS Security Monitor Event Rules - Email Script Question

    Reference: "Configure E-mail Notifications with Scripts for IDS Alerts Using CiscoWorks Monitoring Center for Security"
    http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps4077/products_configuration_example09186a00801fc770.shtml#fivesensor
    Good day all -
    I have created the Email Notification process as desribed in the linked article. The script runs as expected when a High severity alert is triggered but does not fill in the variables within the email body. I have double-checked that I have the right version of the script for the sensors that we are using. Has anyone else been working with this (or some other) scripting solution and maybe have a suggestions on what to try next?

    Try the configuration available at the URL http://cisco.com/en/US/docs/security/security_management/vms/security_monitor/2.2/user/guide/ch05.html.

  • IPhone sometimes displays incorrect time!

    It's frustrating having to reset my iphone so that it will then display the correct time. What's causing this and is there some work-around? Otherwise, it's a rather amazing little device. Thanks for any feedback.

    Thanks for the link! I'll just set "automatically set time" to "off". (settings>general>date & time)
    I don't travel that much, so time zones are not an issue. Perfect solution! A million thanks.

  • Iphone displays incorrect time

    My iphone 5 recently began reporting wrong time. It currently says APR 26, 2033  8:27am
    that time/date cannot be changed to reflect current .
    What is the solution?

    Is "Set automatically" switched on in Settings>General>Date & Time?
    -Ethan

  • Informational events in security monitor

    I am looking for the configuration method so that the VMS security monitor will display informational events in addition to low, med., and high events..
    The documentation I have found explains what the informational event is, but I cannot find out how to enable it in security monitor..
    thanks!

    It should display all events unless you have an event viewer filter. An event viewer filter can be configured for example to only show high severity events.
    http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/cw2000/mon_sec/secmon20/ug/ch04.htm#wp322119

  • ICals on OS X & iOS display different time for same event

    I am in UTC+8 time zone. My boss is in UTC-5 time zone. I have set up sync service on my MBA and iPhone iCals with my company's MS Exchange Server.
    I have a weekly meeting invitation from my boss, my MBA iCal displays this meeting on 10:30pm which is wrong, while my iPhone and MS Server displays 9:30pm which is corret - the meeting takes places on 9:30pm my time.
    All my other iCal events are fine on both devices, only this weekly event displays different time. I have taken with MBA and iPhone to travel around the world over the past half year and switched time zones on them, but they are all set to adjust time zones automatically, and they are with most up-to-date system. Why does MBA iCal displays wrong time? Can I adjust it? This problem exisits on Lion and now also on M Lion.
    Thanks for everyone's attention and help in advance!

    Try using floating time zones. It helped for me.

  • VMS 2.2 + IDS 4.1(2) - delay of events displaying.

    Hi!
    Our customer have IDS 4235 4.1(2) S147 and VMS 2.2 (security monitor 1.2.3).
    We simulated attack to the remote host, but events appeared on the security monitor (events) with 10 – 20 minutes delay. And also, when we attempt enable all IDS signatures, IDS crash and stop responding.
    Help, PLZ. Hi!

    IDS 4.1 communication protocol (RDEP) uses pull model. This means that VMS security monitor should periodically download new events from the sensor. You should find parameter in the security monitor that is responsible for periodic downloading of events. Also, don't enable all signatures on the IDS sensor -- it may run out of memory. Check how much free memory is available with "show version" command.
    Also, your sensor may not handle traffic load. There is a Sig 993 (if I remember correctly), which is disabled by default in 4.1, that can help you troubleshoot this.
    Don't forget to rate all posts.

  • How to display events of only one IPS in Security Monitor?

    Hello,
    i searched the forum with no result. I have CW 2.2 with IDSMC 2.1. I got two IPS and 2 IDSM-2 (4.x is in production / 5.x is in test) which have all their four interfaces sniffing in different network segments. Now i am flooded by the thousands of messages from the internet with no possibilty to just concentrate my view on the events generated on only one special interface of a single IPS.
    To temporarily focus only one one interface of a single IPS how can i filter the events in Security Monitor to only display the events of a this device and a single interface?
    This would be extremly helpfull for to simulate attacks in an test environment with shuning/blocking. I have rare possiblities to set up a second CW IDSMC on another machine. And after all, i would appreciate to focus (filter) in that way for later examining my network to tune signatures and events.
    Furthermore, on IEV 4.1 i was able to get a real time dashboard showing 'real time' events. I did not see this functionality for IPS 5.x and IDSMC. How can i view real time data there to see my networks reaction to simulated attacks.
    Any ideas how to only display only wanted data in Security-Monitor?
    Thanks in advance, Gerhard

    As far as I know, you cannot display the events of only one IPS in Sec Mon.

  • HT5019 MacPro laptop display and 2 external monitors (three displays). Can I have more than one application displayed at a time?

    I would like to have my MacPro laptop display and 2 external monitors (three displays). Question, how can I have more than one application displayed at a time? IE: I would like email on one monitor, Finder on my laptop, and iTunes on the other. Possible?
    With extended desktop, it appears that I can only have one application presenting at a time. Sort of defeats the purpose of having multiple displays.
    I am using the HDMI and the mini HDMI connectors.

    I would like to have my MacPro laptop display and 2 external monitors (three displays). Question, how can I have more than one application displayed at a time? IE: I would like email on one monitor, Finder on my laptop, and iTunes on the other. Possible?
    With extended desktop, it appears that I can only have one application presenting at a time. Sort of defeats the purpose of having multiple displays.
    I am using the HDMI and the mini HDMI connectors.

  • Simple Event being Displayed Multiple Times

    I have a simple event from the past that is being displayed multiple times. There are no other UIDs that are the same in iCal and no other event has the same SUMMARY name.
    This particular event shows up 9 times. I can also reproduce the result from Automator by searching the specific calendar and looking for events in the date range.
    The event is as follows:
    BEGIN:VCALENDAR
    VERSION:2.0
    PRODID:-//Apple Inc.//iCal 3.0//EN
    CALSCALE:GREGORIAN
    BEGIN:VEVENT
    SEQUENCE:5
    TRANSP:OPAQUE
    UID:EC6F5DBC-9BCC-4007-87F2-4A9C796C8551
    DTSTART:20070330T000000
    DTSTAMP:20071206T205550Z
    SUMMARY:Babysit Paul
    CREATED:20080919T173959Z
    DTEND:20070401T120000
    END:VEVENT
    END:VCALENDAR
    I am not very familiar with the format but it looks pretty straight forward.
    The calendar is being synched via Mobile Me and is shared by another two computers. Not sure why this should be relevant since the entry on the computer and on Mobile Me both show this duplication of the event.
    The reason I was looking at all was because of the hangs in iCal since I set the sync to automatic.
    Any ideas welcome,
    Richard

    Post Author: foghat
    CA Forum: Data Connectivity and SQL
    If all the records you are displaying in your report
    truly are duplicated, you could try check off 'select distinct records'
    from the File --> Report Options menu.  While this may solve the problem for you, it would be worthwhile to determine if you are actually joining your tables correctly.
    likely the records aren't an exact duplicate and the problem is with your join criteria.  To verify this you can:  start by removing table b from the database expert altogether.  does
    that solve your problem of multiple rows?  If it does, you are not joining to table b correctlyIf you still have
    multiple rows, loan_id on its own must not make a record unique.  Is
    loan_id duplicated in either of your tables?  Just because loan_id is a
    primary key does not necessarily mean it is unique - often a record
    will have 2 or more primary keys and only when all primary keys are
    used is the record unique.   If you display all of the columns
    from both tables, you will hopefully see some (maybe just one) columns
    where the value is different between your seemingly duplicate data.
    You may need to join on this value as well.as for the type of join you are using (inner, not enforced) you should be fine. Good luck

  • Incorrect Display of Time by Portal Report

    Any assistance would be much appreciated:
    Portal report display of a date field using MM-DD-
    YYYY:HH24:SS:MI is off by 12 hours. Select of same field and
    mask via SQL*Plus looks okay.
    Thanks in advance,
    - LTG

    Chetan,
    Thanks for responding... I'm not sure I follow your suggestion...
    Here is some more info about the problem.
    I used the Portal "Reports From Query Wizard" to create a
    tabular report from a pretty simple db table containing an
    Oracle date field. In the Column Formatting window I entered MM-
    DD-YYYY:HH24:MI:SS for the format mask for the Oracle date
    field. When I run the report, the Oracle date field is
    displayed with an incorrect time (18:52:20 is displayed as
    06:52:20). An Sql*Plus query using to_char(timestamp,'MM-DD-
    YYYYY HH24:MI:SS') displays the correct time.
    I attempted to put to_char(timestamp,'MM-DD-YYYYY HH24:MI:SS')
    into the format mask for the Oracle date field in the Column
    Formatting screen (instead of MM-DD-YYYY HH24:MI:SS). No
    apparent effect.
    Did I follow your suggestion correctly? Is there something more
    to do? Please advise?
    Thanks,
    Len Greenberg

  • I double-click on event  to see all the photos in that event displayed, but all I get is 1 large photo on the edit page.  To see the photos in that event, I have to scroll.  Need to be able to work with all the photos in that event, not one at a time.

    I double-click on event  to see all the photos in that event displayed, but all I get is 1 large photo on the edit page.  To see the photos in that event, I have to scroll.  Need to be able to work with all the photos in that event, not one at a time.

    Maybe you need to adjust the zoom slider in the lower left corner of the window?
    Regards
    Léonie

Maybe you are looking for