Re: [Sguil-users] RealTime Events not updating

[Bamm V. <bam...@gm...>]

The alerts that you query for, are they unique? Meaning do they have a
different source IP and event message?

On Thu, Mar 27, 2008 at 8:36 AM, Matt <mgo...@gm...> wrote:
> Bamm Visscher <bamm.visscher@...> writes:
>  >
>
> > The first thing to check are the configs for each of the agents. Make
>  > sure they are using the same hostname and net name. If you set the
>  > hostname in your barnyard config, make sure it matches too.
>  >
>
>  The hostname settings all match.  I think the agents are working correctly,
>  since I can run a query within sguil and see all of the events.  Strangely
>  enough, occasionally an event will somehow make its way onto the RealTime
>  Events screen.  I can't figure out why the occasional event is shown.
>
>
>
>
>
>
>  -------------------------------------------------------------------------
>  Check out the new SourceForge.net Marketplace.
>  It's the best place to buy or sell services for
>  just about anything Open Source.
>  http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
>  _______________________________________________
>  Sguil-users mailing list
>  Sgu...@li...
>  https://lists.sourceforge.net/lists/listinfo/sguil-users
>



-- 
sguil - The Analyst Console for NSM
http://sguil.sf.net