Troubleshooting
Problem
On a new IBM Security Guardium v10 aggregator unit you find that some data from a certain collector is visible on the aggregator when you run reports, but much of it is missing. The data exists on the the collector and export file sizes suggest the data was sent to the aggregator.
Symptom
For example, a report on the aggregator shows 80 sessions for hostABC on MAY 03. The same report run for MAY 03 on the collector which receives traffic from hostABC shows there were over 5000 sessions that day.
The aggregator does show some data from the collector, so it's clear import worked, but much of the data seems to be missing.
[{"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":"Guardium Central Manager and Aggregator","Platform":[{"code":"PF016","label":"Linux"}],"Version":"10.0;10.1.2","Edition":"Edition Independent","Line of Business":{"code":"LOB76","label":"Data Platform"}}]
Log InLog in to view more of this document
This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.
Was this topic helpful?
Document Information
Modified date:
16 June 2018
UID
swg22003543