IDPS PCAPs at capacity Alarm
search cancel

IDPS PCAPs at capacity Alarm

book

Article ID: 330599

calendar_today

Updated On:

Products

VMware vDefend Firewall

Issue/Introduction

Title: Alarm for IDPS PCAPs at capacity
Event ID: ids_ips.max_pcaps_reached
Alarm Description

  • Purpose: Limit reached for number of PCAPs
  • Impact: There may not necessarily be any impact. This alarm is to notify that the PCAP threshold has been reached.

Environment

VMware NSX

Resolution

Steps to resolve

For release 4.2.0 and higher

Recommended action:

  • There is no manual intervention required.

  • A purge job will kick in automatically and delete 10% of the older PCAP records to bring the total PCAP count in the system below the threshold value.

Maintenance window required for remediation? No 

Powered by Wolken Software