IBM Security Guardium

 View Only
  • 1.  Windows GIM/STAP Services not coming up automatic after reboot

    Posted Tue March 16, 2021 12:56 PM
    In our organization we have Windows DB Servers where GIM/STAP services doesn't come up automatic after server is rebooted. This issue is not consistent on all DB servers but happening rarely on few servers. 

    Has anyone experience this similar issue and what actions were taken to fix this.
    Our team has planned to change the startup type of Guardium services from Automatic to Automatic (Delayed Start). Any suggestions on this?


    ------------------------------
    ANBU S V
    ------------------------------


  • 2.  RE: Windows GIM/STAP Services not coming up automatic after reboot

    Posted Wed March 17, 2021 05:20 AM

    Hi Anbu,

    What's the version of Windows GIM and S-TAP?
    Can you please open a support ticket and send Windows S-TAP Must Gather when you see the issue?
    We don't usually recommend Delayed Start, and want to know exactly what's happening and resolve the issue.

    Please refer to the following document to know how to collect Windows S-TAP Must Gather.
    https://community.ibm.com/community/user/security/blogs/satoshi-kawase1/2020/06/17/overview-of-windows-s-tap-must-gather-v2?CommunityKey=aa1a6549-4b51-421a-9c67-6dd41e65ef85


    Thanks,
    Satoshi



    ------------------------------
    SATOSHI KAWASE
    ------------------------------



  • 3.  RE: Windows GIM/STAP Services not coming up automatic after reboot

    Posted Tue March 30, 2021 04:53 PM
    Hello Kawase,

    Please I have a challenge in S-TAP installation using the Setup by client option in GIM. It says installed however no S-TAP was detected. Can this challenge can be from the fact that the S-TAP version is not the same as the Appliance version.

    ------------------------------
    Kevin Ani
    ------------------------------



  • 4.  RE: Windows GIM/STAP Services not coming up automatic after reboot

    Posted Tue March 30, 2021 08:19 PM

    Hi Kevin,

    The appliance version is expected to be the same or bit higher than S-TAP, but I don't believe this can cause "INSTALLED" with no actual installation.

    What do you mean by "no S-TAP was detected"? Can I guess the S-TAP isn't seen from GUI > S-TAP Control? Can you please check the DB server and see if Win S-TAP was actually installed? By default, you should see the install log at "C:\IBM Windows S-TAP.ctl" and files are installed at "C:\Program Files\IBM\Windows S-TAP". The GIM.log ("C:\Program Files (x86)\Guardium\Guardium Installation Manager\GIM\Current\GIM.log" by default) is also helpful for installation issues. All these files are included in Windows S-TAP Must Gather. This is why I suggested to open a support ticket and send it to us. It's much better than guessing something without diagnostic files. If nothing is happening in the DB Server side, we can involve the appliance team to see what's happening in the appliance side.

    Thanks!
    Satoshi



    ------------------------------
    SATOSHI KAWASE
    ------------------------------