暂无图片
暂无图片
暂无图片
暂无图片
暂无图片
H3C SecCenter CSAP-SA-AK系列综合日志审计平台 用户FAQ(E6101)-5W104-整本手册.pdf
149
17页
1次
2022-06-26
免费下载
H3C SecCenter CSAP-SA-AK 系列综合日志
审计系统
用户 FAQ
Copyright © 2022 新华三技术有限公司 版权所有,保留一切权利。
非经本公司书面许可,任何单位和个人不得擅自摘抄、复制本文档内容的部分或全部,并不得以任何形式传播。
除新华三技术有限公司的商标外,本手册中出现的其它公司的商标、产品标识及商品名称,由各自权利人拥有。
本文档中的信息可能变动,恕不另行通知。
i
售前 FAQ ···················································································································································· 1
什么是综合日志审计? ······························································································································· 1
为什么各类 IT 设备自身都有审计日志,还需要我们的什么产品? ····························································· 1
综合日志审计平台能做什么? ···················································································································· 1
售后 FAQ ···················································································································································· 1
日志采集范围: ·········································································································································· 1
端口可达的情况下,SSH 远程连接失败? ································································································· 2
Web 页面无法访问 ····································································································································· 2
Windows Agent 安装失 ··························································································································· 2
Windows Agent 配置无法保存 ···················································································································· 3
Windows agent 日志源无法收到日志 ········································································································· 3
Syslog 日志源无日志 ·································································································································· 4
日志查询显示 other 和未知事件 ·················································································································· 5
日志查询收集的日志之前可以解析,突然出现不能解析的情况 ·································································· 5
网卡模块 ····················································································································································· 5
Windows XP Winserver 2003 系统安装完 Agent 后,系统日志采集列表处显示空白或显示不全 ·········· 6
设备 WMI 采集不到日志 ····························································································································· 6
设备导入授权后资产数和剩余资产数显示不变 ··························································································· 6
设置了自动转存路径,但是在转存路径下无文件 ······················································································· 7
点击数据备份或还原,提示失败 ················································································································· 7
告警通知、日志导出、内部审计日志导出、ping 工具、日志监测功能不生效 ··········································· 7
设备插上或拔出插卡未初始化,导致网络>网络设置,修改设备地址功能不生效 ······································ 7
点击日志还原,日志还原功能不生效 ········································································································· 8
设备已导入正式授权,再导入之前临时的授权文件,License 会更新 ························································ 8
设备同时配置主备 DNS,当主 DNS 效时,备 DNS 不生效 ··································································· 8
分析目录下部分图表的横坐标 IP 地址及应用名称显示不全 ······································································· 8
通过监控平台 IMC 设备监控到的 cpu 和内存与日志审计平台页面显示的 cpu 和内存值存在偏差·········· 8
设备面板口接口坏掉一个或多个,初始化后会导致接口顺序混乱 ······························································ 9
日志审计系统页面上方出现提示信息未收到告警,点击验证的提示语,对使用有什么影响,怎么去除提
示信息························································································································································· 9
除系统内置的资产类型,是否支持自定义资产类型 ···················································································· 9
新增解析规则,解析规则不生效 ················································································································· 9
设置密码策略,密码变更周期,达到变更周期没有提示更换密码 ···························································· 10
ii
设置定时生成周报、月报,达到设置时间,没有生成报 ······································································· 10
系统无法导入日志文件 ····························································································································· 10
系统数据索引、日志查询页面加载不出来,首页无数据 ·········································································· 10
创建报表上传 logo 时,将其它格式文件后缀改成 png 上传后会导致生成报表过程页面无法访问 ··········· 10
修改系统登录超时时间会自动退出到登录页面,需重新登录 ··································································· 11
后台 Reboot 命令重启设备,设备无法启动 ······························································································ 11
关系设置>关系规则,关系名称过长会导致关系模型预览中字和图标重合 ··············································· 11
本机采集器无法通过页面关闭,关闭后过一段时间会自动重启 ································································ 11
数据备份、报表等搜索框输入()搜索不出结果 ····················································································· 11
概率性存在 PDF 格式报表无法下载,且当报表名称中包含特殊字符时,报表导出后大小为 0KB,无法查
······························································································································································ 11
用户名称中包含@特殊字符无法登录 ···································································································· 12
分析图表报表告警追溯等存在显示的日志数量与跳转后的数量不一致 ····················································· 12
首页资产总数与跳转后资产数量不一 ···································································································· 12
JDBC WMI 设置采集时间间隔不生效 ·································································································· 12
升级 E101P02 版本时,出现长时间卡在某一进度的问题 ········································································ 12
资产监控只支持华为交换机、linuxwindows 监控吗 ·············································································· 12
系统页面访问延时较大如何处理 ··············································································································· 13
系统默认管理员忘记密码如何处理 ··········································································································· 13
只能查看近 7 天日志其余时间日志无法查询 ························································································· 13
低版本存在内存打满、磁盘打满、超规格等问题导致的页面无法访问、日志无法查询、页面加载慢SSH
无法连接、组建状态异常等问题 ··············································································································· 13
系统几个初始化命令 ································································································································· 13
系统未达到设置的告警阈值出现磁盘告警 ································································································ 14
系统组建告警产生日志对系统有影响 ···································································································· 14
数据清理清理后磁盘空间无法降低 ··········································································································· 14
为什么已经添加的资产在资产列表页面查找不到,在资产监控页面可以查到 ·········································· 14
of 17
免费下载
【版权声明】本文为墨天轮用户原创内容,转载时必须标注文档的来源(墨天轮),文档链接,文档作者等基本信息,否则作者和墨天轮有权追究责任。如果您发现墨天轮中有涉嫌抄袭或者侵权的内容,欢迎发送邮件至:contact@modb.pro进行举报,并提供相关证据,一经查实,墨天轮将立刻删除相关内容。