- Make sure McAfee EIA service is running on the NTBA Appliance.
- Make sure that endpoint connections are made to the NTBA Appliance.
- Check the ntba.log file by running the TOP_PROCESS query:
2013-08-27 10:51:10,019 INFO iv.core.nba.control.command - NBA Command ID -> 0
2013-08-27 10:51:10,019 INFO iv.core.nba.control.command - NBA Command Name -> TOP_PROCESS
2013-08-27 10:51:10,019 INFO iv.core.nba.control.command - Response returned from NBA Server
2013-08-27 10:51:10,019 INFO iv.core.nba.control.command - {message=OK, isXML=true, respcode=200, msgcode=0,
data=<results> <proc p_id="172475594623937" p_hash="62880e4a7bd8d63aed832734836b4093" p_nm="HTMLayout"
b_name="HTMLayout.dll" s_name="" p_ver="3, 3, 2, 4" p_conf="5" p_cls="0" f_size="0" f_sn="2013-08-26 23:00:00"
l_sn="2013-08-26 23:00:00" host_cnt="1" con_cnt="2" /></results>, Id=4697, isPartial=false, code=200}
2013-08-27 10:51:10,019 INFO iv.core.nba.control.command - Response -> {message=OK, isXML=true, respcode=200,
msgcode=0, data=<results> <proc p_id="172475594623937" p_hash="62880e4a7bd8d63aed832734836b4093" p_nm="HTMLayout"
b_name="HTMLayout.dll" s_name="" p_ver="3, 3, 2, 4" p_conf="5" p_cls="0" f_size="0" f_sn="2013-08-26 23:00:00"
l_sn="2013-08-26 23:00:00" host_cnt="1" con_cnt="2" /></results>, Id=4697, isPartial=false, code=200}
2013-08-27 10:51:10,019 INFO iv.core.nba.control.command - Response message text -> <results>
<proc p_id="172475594623937" p_hash="62880e4a7bd8d63aed832734836b4093" p_nm="HTMLayout" b_name="HTMLayout.dll"
s_name="" p_ver="3, 3, 2, 4" p_conf="5" p_cls="0" f_size="0" f_sn="2013-08-26 23:00:00" l_sn="2013-08-26 23:00:00"
host_cnt="1" con_cnt="2" /></results>
2013-08-27 10:51:10,019 INFO iv.core.nba.control.command -
This query returns the list of Top Executables from the NTBA Appliance.