These are the informational faults of a Manager and Central Manager. These messages are only for your information and there is no specific action to be taken.
Fault | Severity | Description/Cause |
|---|---|---|
System Startup and Alert Restoration in Process | Informational | The Manager is starting up and restoring its alerts. (Not all alerts may be visible until the Manager is fully operational.) |
Database Backup Started | Informational | A database backup is in progress. |
Database Backup Complete | Informational | The database was successfully backed up. |
Custom Attack Save in Progress | Informational | One or more custom attack definition is in the process of being saved to the Manager. |
Custom Attack Save Complete | Informational | One or more custom attack definition has been successfully saved to the Manager. |
Audit Logs Rotated | Informational | The audit log capacity on the Manager is 50000 records. When this maximum number of records is reached, the Manager overwrites the oldest records with the newest records (i.e. first in, first out). This fault indicates that <number> new records have been written to the audit log and that the oldest audit log records have been overwritten. This fault will be raised every <number> record(s) written. |
License Auto Assignment Success | Informational | Successfully auto assigned license with keys {00-XX-00-00} to device. |
Manual Import Started | Informational | A device software image, IPS signature set, Callback Detectors file or GAM update is being imported into the Manager. |
Callback Detectors Import Started | Informational | A Callback Detectors file is being imported into the Manager. |
Contacting Update Server | Informational | The Manager is connecting to the Trellix IPS Update server to download an update. |
Deployment Started | Informational | The Manager is in the process of deploying updates to its devices. This can include configuration changes, signature sets, Callback Detectors, GAM updates and SSL decryption certificates, as applicable. |
Deployment Complete | Informational | The Manager successfully deployed updates to device {0}. This can include configuration changes, signature sets, Callback Detectors, GAM updates and SSL decryption certificates, as applicable. |
Signature Set Download Started | Informational | A signature set is being downloaded from the Trellix IPS Update Server to the Manager. |
Signature Set Download Complete | Informational | A signature set was successfully downloaded from the Trellix IPS Update Server to the Manager. |
Automatic Signature Set Download Started | Informational | The scheduled signature set download from the Trellix IPS Update Server to the Manager is in progress. |
Automatic Signature Set Download Complete | Informational | The scheduled signature set download from the Trellix IPS Update Server to the Manager was successful. |
Automatic Callback Detectors Download Started | Informational | The scheduled Callback Detectors download from the Trellix IPS Update Server to the Manager is in progress. |
Automatic Callback Detectors Download Complete | Informational | The scheduled Callback Detectors download from the Trellix IPS Update Server to the Manager was successful. |
Update Started | Informational | The Manager is connecting to the Trellix IPS Update Server. |
Update Complete | Informational | The Manager has successfully connected to the Trellix IPS Update Server for updates. |
Automatic Signature Set Deployment Started | Informational | A new signature set has recently been downloaded by the Manager and is being deployed to its devices. |
Automatic Signature Set Deployment Complete | Informational | A new signature set has recently been downloaded by the Manager and successfully deployed to its devices. |
Automatic Callback Detectors Deployment Started | Informational | A new Callback Detectors version has recently been downloaded by the Manager and is being deployed to its devices. |
Automatic Callback Detectors Deployment Complete | Informational | A new Callback Detectors version has recently been downloaded by the Manager and successfully deployed to its devices. |
Scheduled Signature Set Deployment Started | Informational | A new signature is being deployed by the Manager to its devices, as scheduled. |
Scheduled Signature Set Deployment Complete | Informational | A new signature was successfully deployed by the Manager to its devices, as scheduled. |
Scheduled Signature Set Deployment Complete | Informational | A new signature set was successfully deployed by the Manager to its NTBA devices, as scheduled. |
Callback Detectors Deployment Started | Informational | A new Callback Detectors version has recently been downloaded by the Manager and is being deployed to its devices. |
Scheduled Callback Detectors Deployment Complete | Informational | A new Callback Detectors version has recently been downloaded by the Manager and is being deployed to its devices. |
Database Tuning Started | Informational | The Manager database is currently being tuned. |
Database Tuning Complete | Informational | The Manager database was successfully tuned. |
Alert Archival Started | Informational | Alerts are currently being archived. Do not attempt to tune, back up or restore the database until the archival process is complete. |
Alert Archival Complete | Informational | The alert archival completed successfully. |
Device Discovery Started ({0}, {1}) | Informational | The Manager is in the process of discovering a new device. |
MDR Synchronization Started | Informational | The synchronization from the peer Manager is in progress. |
MDR Synchronization Complete | Informational | Synchronization from the peer Manager has completed successfully. |
MDR Pair Reset to Standalone | Informational | The MDR pair has been reset to standalone Managers. This {0} is standalone and will take control of the {1}. |
MDR Pair Reset to Standalone | Informational | The MDR pair has been reset to standalone Managers. The peer {0} is standalone and will take control of the {1}. |
MDR Pair Created | Informational | Manager Disaster Recovery (MDR) has been successfully configured. |
MDR Pair Creation Canceled | Informational | Manager Disaster Recovery (MDR) creation has been canceled. |
Manual MDR Switchover Started | Informational | The administrator has initiated an MDR switchover. (The secondary {0} will take control of the {1}.) |
Manual MDR Switchover Complete | Informational | The administrator-initiated MDR switchover has completed without error. (The secondary {0} will take control of the {1}.) |
MDR Switchback Complete | Informational | The MDR switchback has completed without error. (The primary {0} will take control of the {1}.) |
Successful MDR Synchronization | Informational | The secondary {0} has successfully retrieved configuration information from the primary {0}. |
MDR Suspended | Informational | Manager Disaster Recovery has been administratively suspended. (No switchover will take place while MDR is suspended.) |
MDR Resumed | Informational | Manager Disaster Recovery functionality has been resumed by the administrator after previous suspension. Failover functionality is again available. |
Alert Archival Started | Informational | The Manager is archiving alerts. |
Attack Packet Capture Archival Started | Informational | The Manager is archiving attack packet captures. |
Telemetry Enabled for Trellix Virtual IPS Cluster Usage | Informational | Telemetry for Trellix Virtual IPS cluster usage data has been automatically enabled because one or more Trellix Virtual IPS Cluster is defined on this Manager. You can view the details of what is being sent to Trellix on the GTI Integration page. (The telemetry data will be sent as long as one or more Trellix Virtual IPS Cluster is defined.) |
Vulnerability Data Import Complete | Informational | {0} |
Vulnerability Assessment Report Import Complete | Informational | {0} |
Custom Attack Incorporated into Signature Set | Informational | One or more custom attack definition has been incorporated into the published Trellix signature set and therefore removed as a custom attack. Removed custom attacks: {0} |
Importing alert data to Solr started | Informational | Upgrade of Trellix IPS requires reindexing data. Reindexing of data in progress. Attack Log and Dashboard will not have all the data during reindexing. |
Importing alert data to Solr completed | Informational | Upgrade of Trellix IPS requires reindexing data. Reindexing of data completed. |