topic Re: IDS/9000 Error Msg in Operating System - HP-UX

IDS/9000 Error Msg

Joanne Keegan — Thu, 11 Apr 2002 01:06:33 GMT

Hi Everyone,

I have loaded the IDS/9000 (Ver 2.0) s/w on a couple of servers as agents. The following error comes up:

runEngine:failed to send event <103:0:237:589244538:>
MI_eventInput:Failed to create event engine:ECS_ERROR

This only occurs on the agent servers not the management server. Does anyone know why, and what can be done to stop this error from generating? Is it a permissions thing?

Thanks for your help.

Regards,

Jo

PS - I do award points!

Re: IDS/9000 Error Msg

Jeff Schussele — Thu, 11 Apr 2002 01:31:03 GMT

Hi Joanne,

Possible the problem is ITO-related - check this thread:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x264868c57f64d4118fee0090279cd0f9,00.html

And I feel your pain, the IDS docs really blow error msg-wise.

HTH,
Jeff

Re: IDS/9000 Error Msg

Steve Steel — Thu, 11 Apr 2002 11:03:17 GMT

Hi

seems from other forums to be a patch in the make and there is a workaround to this problem:

Workaround: comment out all lines which say

DSP_TAG KERN

DSP_FILTER SETSCALL on 366 1 # lstat64

DSP_TAG KERN

DSP_FILTER SETSCALL on 369 1 # stat64

in /etc/opt/ids/ids.cf

Steve Steel

Re: IDS/9000 Error Msg

Joanne Keegan — Thu, 11 Apr 2002 19:44:40 GMT

Thanks to both Jeff and Steve for your help.

I made the changes that Steve suggested, and it now works. Thanks.

Jo