Flags displayed on the SIEM Enterprise Security Manager UI

Technical Articles ID: KB93919
Last Modified: 2022-11-22 09:15:47 Etc/GMT

Environment

SIEM Enterprise Security Manager (ESM) 11.x
SIEM Event Receiver (ERC) 11.x
SIEM Enterprise Log Manager (ELM) 11.x
SIEM Application Data Monitor 11.x
SIEM Database Event Monitor 11.x
SIEM Advanced Correlation Manager 11.x

Summary

Flags can indicate any of the following conditions:

Partitions have been deleted
Loss of communication to the ELM or ELS
Unable to communicate to the device from the ESM
Disk or partition is about to get full
ELM is behind in processing events from the ERC

Red flags indicate that a critical event has occurred on the respective device.

Yellow flags indicate a warning message.

White flags are informational flags and can be ignored.

Problem

Red, yellow, or white flags appear on the ESM UI.

Solution

To clear flags, perform the steps below:

Validate the flags. Click the respective flag displayed for the device in the ESM UI.
Click Active Flag(s) and see if any flags are currently active.
Navigate to the Device properties and check the Device Logs. To verify the details of the flag, click View.
When you've verified that the issue mentioned in the flags has been resolved, perform these steps to clear the flags:
- Click the Red flag on the ESM in the physical display of the ESM GUI.
- Click Clear Selected if you want to clear the Selected flags or Clear All if you want to clear all flags.
If the flags don't clear, perform the following workarounds:
- On the ESM CLI, execute service esshealthmon restart.
- On the Device CLI, execute service healthmon restart.
When the commands have successfully executed, verify the status of the flags on the ESM UI. The flags automatically clear after some time.

NOTE: Open a service request with Technical Support for either of the following situations:

The flags aren't cleared after you follow the above steps.
You're unsure whether the issue mentioned in the flags has been resolved.

To contact Technical Support, go to the Create a Service Request page and log on to the ServicePortal.

If you are a registered user, type your User ID and Password, and then click Log In.
If you are not a registered user, click Register and complete the fields to have your password and instructions emailed to you.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Flags displayed on the SIEM Enterprise Security Manager UI

Environment

Summary

Problem

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

Flags displayed on the SIEM Enterprise Security Manager UI

Environment

Summary

Problem

Solution

Affected Products

Languages:

Choose your region

Title

Title