HI Everyone,

I have an issue in enabling quick search in order to make Risk Spotter active, So I have given command as per the below screenshot and i have noticed that quick search is enabled for all managed units but for CM I think it is not active. Kindly suggest the next step for this issue




Thanks,
Panendar Rao.C

------------------------------
PHANENDRA RAO CHAVANA
------------------------------

Hi Phanendra, there's an error at the end of the GuardAPI you ran. It hints that there's an issue with scheduling, due to data-level security. You should disable that if you want Enterprise search (Investigation dashboard). From Knowledge center documentation,  Data Security - User Hierarchy and Databases associations:

Restriction

Data Level Security and the Investigation Dashboard cannot be enabled concurrently.

BTW, see also related discussion here for other related commands like grdapi test_solr . You can also try to run  grdapi get_quick_search_info to better understand what is going on (see knowledge center page).

------------------------------
TAL DANIEL
Guardium developer
IBM Security
Israel
------------------------------

Hello,

Also note that the CM and collectors time zone must be the same.

------------------------------
Regards,

Fırat Bişkin
System Security Specialist
IBM Global Technology Services
------------------------------