IDS/9000 Error Msg

[Joanne Keegan]

Hi Everyone,

I have loaded the IDS/9000 (Ver 2.0) s/w on a couple of servers as agents. The following error comes up:

runEngine:failed to send event <103:0:237:589244538:>
MI_eventInput:Failed to create event engine:ECS_ERROR

This only occurs on the agent servers not the management server. Does anyone know why, and what can be done to stop this error from generating? Is it a permissions thing?

Thanks for your help.

Regards,

Jo

PS - I do award points!

[Jeff Schussele]

Hi Joanne,

Possible the problem is ITO-related - check this thread:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x264868c57f64d4118fee0090279cd0f9,00.html

And I feel your pain, the IDS docs really blow error msg-wise.

HTH,
Jeff

[Steve Steel · Accepted solution]

Hi


seems from other forums to be a patch in the make and there is a workaround to this problem:

Workaround: comment out all lines which say

DSP_TAG KERN

DSP_FILTER SETSCALL on 366 1 # lstat64

DSP_TAG KERN

DSP_FILTER SETSCALL on 369 1 # stat64

in /etc/opt/ids/ids.cf

Steve Steel

[Joanne Keegan]

Thanks to both Jeff and Steve for your help.

I made the changes that Steve suggested, and it now works. Thanks.

Jo