On my remote event collector server (Event Viewer logs) which stopped
reporting.
(EventCollector_XXXXX)- Could not decrypt database password from policy
file.
Via the https interface I get this error
An Error has occurred. Error Message:Connection refused. No connection
could be made because the target machine actively refused it. This
usually results from trying to connect to a service that is inactive on
the foreign host - there is no server application running.
[ID=0xc721003e]
Another error
(EventCollector_XXXXX) - Fatal error! The Event Collector cannot connect
to the database or there is a database error: The Event Collector must
shutdown its connection to the database and the sensors in order to
prevent events from getting lost. This could be due to a
misconfiguration of the Event Collector, network communication problems,
or a problem with the database itself (e.g. database full).
[ID=0xc734002f]
Which it is not.
From the desktop controller
(DesktopController_XXXXX) - OnError from 192.168.30.15: The credentials
(name, public key) announced by the peer during session authentication
conflict with those configured for this session. [ID=0xc7200005]
The database is located on 192.168.10.10 which can talk fine to
192.168.30.15 (remote event collector)
Thoughts?
Steven Nichols
_______________________________________________
ISSForum mailing list
ISSForum@iss.net
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet Security Systems,
6303 Barfield Road, Atlanta, Georgia, USA 30328.
