ER data range constantly behind


This article applies to:

  • Enterprise Reporter

Question:

Enterprise Reporter date range constantly behind

Reply

If you notice that the latest date available in your ER data range is constantly a few days behind today's date, it may be due to too much traffic being processed by the ER.

Please contact Trustwave Technical Support support@m86security.com  or (888) 786-7999.  The technical support team may be able to help with that with a backend modification.

If you already have backend root access to your ER and are familiar with Linux, edit the /etc/crontab file and add this line to it:

30 2 * * * root /usr/local/8e6/bin/dbsummary -d -f /usr/local/8e6/conf/dbsummary.conf

Keep in mind it must entered as one line. This would ensure that every night the summarization will start on its own instead of waiting for other processes to finish working on the raw logs prior of being launched automatically by another process (which is the default).

This article was previously published as:
8e6 KB 286558

Last Modified 4/24/2009.
https://support.trustwave.com/kb/KnowledgebaseArticle12500.aspx