‘Data Retrieval’ objectives not working correctly

Owned by Carlos Osorio
Nov 12, 2020


SUMMARY

Aug 21, 2015

Symptoms

The 'Data Retrieval' objectives are not retrieving the user and group information from specified Snare agents.

Recommended

  1. In the appropriate 'Data Retrieval' objective, check that the settings in the 'Configure' tab have been set correctly. A common error in most instances is that the name of the collection host has not been spelled correctly or has not been fully qualified. If in doubt, 'ping' the host to see if it is able to be contacted.

  2. If any error has been corrected, regenerate the objective manually and ensure that the details of the users and groups are displayed. If an error is still reported then check the password that has been set in the Configuration Wizard found in the 'Snare General Configuration Items' objective in 'Snare Server Utilities', as shown in Figure 9 below. If the password entered in this objective does not match the remote agent's password, then it will not be able to contact the agent and retrieve the users and groups.

  3. If a manual regeneration of the objective still shows an error, then attempt to connect to the agent using a web browser. If the remote access is not successful, then either the name, connection port and/or password is incorrect. All of these items need to be correct before proceeding.