Skip to main content

Join us at Gartner SEC London and discover how LevelBlue can help you secure what’s next. Learn More

Loading...
Loading...

INFO: ER data range constantly behind

Expand / Collapse


This article applies to:

  • Enterprise Reporter

Question:

Enterprise Reporter date range constantly behind

Reply

If you notice that the latest date available in your ER data range is constantly a few days behind today's date, it may be due to too much traffic being processed by the ER.

Please contact Trustwave Technical Support support@m86security.com  or (888) 786-7999.  The technical support team may be able to help with that with a backend modification.

If you already have backend root access to your ER and are familiar with Linux, edit the /etc/crontab file and add this line to it:

30 2 * * * root /usr/local/8e6/bin/dbsummary -d -f /usr/local/8e6/conf/dbsummary.conf

Keep in mind it must entered as one line. This would ensure that every night the summarization will start on its own instead of waiting for other processes to finish working on the raw logs prior of being launched automatically by another process (which is the default).

This article was previously published as:
8e6 KB 286558

To contact LevelBlue about this article or to request support:


Rate this Article:
     
Tags:

Add Your Comments


Comment submission is disabled for anonymous users.
Please send feedback to Trustwave Technical Support or the Webmaster
.