Imperva Cyber Community

Expand all | Collapse all

Recieving data based on Instance

  • 1.  Recieving data based on Instance

    Impervian
    Posted 13 days ago
    Hello,

    We have an mssql agent working and monitoring as it should. We wanted to monitor some additional instances which where on a different port, but same host. I added the port at the service level and restarted the agent just in case.

    We are not receiving audit data from the instance we wanted. Any idea why not?

    Br,
    #ImpervaAgent

    ------------------------------
    Sabajete Elezaj
    SNT Albania
    ------------------------------


  • 2.  RE: Recieving data based on Instance

    Impervian
    Posted 13 days ago
    On the agent settings, do you have data interface discovery enabled?   

    On the agent data interface tab, is there a user defined or discovered data interface for that ip/port combination?

    ------------------------------
    Robert Miller
    Bank of the West
    Omaha NE
    ------------------------------



  • 3.  RE: Recieving data based on Instance

    Impervian
    Posted 12 days ago
    Hello,

    Yes Data interface discovery is enabled.
    Also, on data interface tab IP:port is discovered.



    ------------------------------
    Sabajete Elezaj
    SNT Albania
    ------------------------------



  • 4.  RE: Recieving data based on Instance

    Community Manager
    Posted 12 days ago
    @Sabajete Elezaj

    From one of our experts: 

    From what I understand is that another channel needs to be defined on the same agent, and not another port at the service level. Also an agent restart is probably irrelevant.
    ​ 

    Also, the corresponding data interfaces should be generated automatically on the relevant agent in MX, if not - it might be a bug
    A possible WA can be adding them manually. 

    ------------------------------
    Christopher Detzel
    Community Manager
    Imperva
    ------------------------------



  • 5.  RE: Recieving data based on Instance

    Impervian
    Posted 12 days ago
    Thank you for the feedback @Christopher Detzel ​.
     I added port in service since the previous instance was in another port. So two different instances, two ports. 
    Can you elaborate on how to define another channel on the same agent?

    I will try to add data interface manually and keep you posted.

    ------------------------------
    Sabajete Elezaj
    SNT Albania
    ------------------------------