is it normal for the cached events to lag behind, even if you select update alert cache? I have tried using base_maintenance.pl in a cron, but it fails every dew times with a error 500. any ideas? thanks
no, it is not at all normal. And the
maintainance script should not be necessary, actually.
As to your error 500: Have a look at
error_log or ssl_error_log of your httpd to get a more descriptive message.
Does the refresh mechanism of your browser work? Is there anything that prevents your browser from refreshing automatically?
And you are sure, that the database itself is properly filled with data by snort or any of these external helper programs, aren't you?