Environment
Situation
When Security Manager and the NetIQ Security Agent for UNIX are used to monitor one or more UNIX servers and Hotfix 72574 is installed or any later hotfixes for the UNIX agent, the data from the UNIX servers cannot be seen in any reports run from summarized archival data. The agent receives data from the servers and stores that data in the log archive, but because of a mismatched parameter when the central computer registers UNIX agents, the data does not include the computer GUID of the UNIX server. The missing GUID causes reports run against the UNIX server data to fail. (ENG319357)
Resolution
Complete the following steps to install this hotfix.
-
Log on to the central computer using an account that is a member of the local Administrators group.
-
Run the SM65400_Hotfix7006749.msp file on the computer.
-
Follow the instructions in the setup program until installing the hotfi is finished.
-
Repeat Steps 1 through 3 for each central computer in the configuration group.
-
Log on to the central computer using an account that is a member of the local Administrators group.
-
Click the Start menu and navigate to the Command Prompt tool.
-
Right-click Command Prompt and select Run as administrator.
-
If User Account Control prompts you to confirm, click Yes.
-
In the command-line interface, type SM65400_Hotfix7006749.msp and then press Enter.
-
Follow the instructions in the setup program until the installation is completed.
-
Repeat Steps 1 through 6 for each central computer in the configuration group.
Additional Information
After installing this hotfix on the central computers, any monitored UNIX computers that are experiencing the issue must be re-register.
To re-register monitored UNIX computers:
-
On the central computer or a separate user interface computer, start the Security Manager Control Center in the NetIQ Security Manager program group.
-
In the Tasks pane, click Global Tasks > Launch Configuration Wizard.
-
In the Configuration Wizard, click Support for Operating Systems, then click Configure Security Manager to archive UNIX logs.
-
Click Managed UNIX Computers.
-
Select the monitored UNIX computers that are experiencing the issue and click Remove.
-
Click Finish.
-
Click Close.
-
Reopen the Configuration Wizard.
-
In the Configuration Wizard, select Support for Operating Systems, then select Configure Security Manager to archive UNIX logs.
-
Select Managed UNIX Computers.
-
Click Add and specify one of the previously-removed UNIX computers, then click OK.
-
Repeat Step 11 for each previously-removed UNIX computer.
-
Click Finish.
-
Click Close.
Repeat Steps 1 through 14 for each central computer in your configuration group that monitors UNIX agents.