Imperva Cyber Community

communities_1.jpg
 View Only

  • 1.  Failed to retrieve indexing audit data from

    Posted 27 days ago

    Hi everybody,

    I got a problem with reports (finished with warnings: Failed to retreive indexing audit data from GW) and the same error in DB Audit Data.

    I opened a case with support but send me a link where I have no access and then they put the file in the FTP but it is damaged. I tryied to solve this since 5 days ago and in the meanwhile I am without service.

    I changed the fast day view from 7 to 1 and nothing happens.

    Could someone help me to solve it?


    #DatabaseActivityMonitoring

    ------------------------------
    Daniel Bonina
    Cyber Security
    Banco de Formosa
    Formosa
    ------------------------------


  • 2.  RE: Failed to retrieve indexing audit data from

    Posted 26 days ago
    Edited by SBISOC 4430 26 days ago

    Hi Daniel,

    There could be several reasons due to which that error has been popped up. Querying DB Audit Data and audit report generation will show same error.

    Firstly, please confirm whether you are facing that issue with all DB audit reports or with some specific reports or for some particular gateways only.

    Did you try to clear the management server's audit cache by going to Audit -> Audit Management Statistics -> Management Server? Click "Clear all audit data" to clear the MX's audit cache because this does not affect actual audit data, only the index that the MX server builds.

    Is there any space related issue on those gateways? Considering all scheduled jobs like Audit Purge, Audit Fast View, Audit Archive are run on a daily basis, their execution status is successful or not in the last 7 days? Whether out of the box audit policy like Default Audit Rule - All Events is enabled or not?

    Regards,

     



    ------------------------------
    SBISOC 4430
    Manager
    Mumbai
    ------------------------------

    Original Message