IBM License Metric Tool (ILMT)

 View Only
  • 1.  One Collector in Guardium shows a S-TAP offline (red)

    Posted Thu December 22, 2022 09:15 AM
    Edited by Portia Melita Wed January 04, 2023 01:33 PM
    Hi,

    Our Guardium environment consists in 11 appliances (1 CM, 2 Agg and 9 collectors) that is running Guardium V11.3.

    Inside one of the collectors we have an S-TAP that is in an offline state.

    Checks performed:
    • Ports are open bidirectionally
    • Removed and reinstalled "GIM" and "S-TAP" V.11.3.312
    • Restart the inspection engine service with "restart inspection-core"
    Any hints as to why it's not online?

    Thanks in advance.


  • 2.  RE: One Collector in Guardium shows a S-TAP offline (red)

    Posted Thu January 05, 2023 10:07 AM
    Edited by Portia Melita Mon January 09, 2023 09:52 AM

    Hi,

     

    Any response to my post will be appreciated it.

     

    Addiotinally to the steps provides before:

     

    - In some Collectors, some of DB STAP status is still showing red.

    - in STAP Status page, cannot run any commands to force STAP (example: restart, STAP logging, Revoke ignore or Run Database Instance Discovery) as it is gray out

    - Checked in "COLLECTOR LOG", line XXX did not show any changes or communication with DB

    - I can ping to DB normally

    - All ports are opened bidirectional, no firewall or antivirus installed/running

    - All DB are on Microsoft SQL 2016 and GIM/STAP Services are up and running fine

    - The S-TAP Certification is already unchecked (We already try using this point in on)

     

    Is there any other troubleshooting suggestion that I can do before open a support case?

     

     

    Many thanks,






  • 3.  RE: One Collector in Guardium shows a S-TAP offline (red)

    Posted Mon January 09, 2023 08:47 AM
    Hi @CyberSOC,

    I'm not sure if you're raising this question in the correct place - this is the forum of the IBM License Metric Tool only, we have no expertise in the internals of the IBM Guardium. I'm afraid you need to open a regular Support Case to the IBM Guardium as we can't help you here with this issue.


    ------------------------------
    kind regards,
    Łukasz
    ------------------------------