User Experience with EventsManager 8.0 BETA 1 (Full Version)

All Forums >> [Network Security] >> GFI EventsManager



Message


Tmueller -> User Experience with EventsManager 8.0 BETA 1 (19.Feb.2008 6:42:56 PM)

Could I get user comments on their experiences with EventsManager 8.0 Beta 1 so far?   I want to install it and begin using it, but I am leary of Beta versions.  


Could the users who have switched over and begun using EventsManager 8.0 Beta 1 comment on their experiences so far?

I wonder how long it will take for GFI to make the non-Beta version of EventsManager available?




Mark Busuttil -> RE: User Experience with EventsManager 8.0 BETA 1 (22.Feb.2008 11:15:03 AM)

Hi,

EventsManager 8 has been released, more information on this can be found at the following link:

http://www.gfi.com/eventsmanager/





Tmueller -> RE: User Experience with EventsManager 8.0 BETA 1 (22.Feb.2008 12:07:30 PM)

I had major problems with the upgrade from Version 7.1 to Version 8.  It was so bad, I had to restore version 7.1.    This was a major headache.  

Many of the problems were associated with duplicate priority numbers within the EventProcessing rules.    I have created hundreds of event processing rules to get rid of alot of the noise.   The default rules were superimposed over my custom rules after the upgrade.  It was difficult determining what rules I customized so I could restore my rulesets.    If I were you, I'd make screen prints of your existing rule sets to help you in restoring your rule set base.

Also, some of my custom EventsBrowser queries did not get carried over from Version 7.1 to version 8.

All in all it has been a nightmare.  I'd advise all users not to upgrade if they have customised their rule sets and Eventsbrowser queries.

I have been working with GFI support on this and they have reproduced the problem.




Mark Busuttil -> RE: User Experience with EventsManager 8.0 BETA 1 (26.Feb.2008 4:41:59 AM)

This issue is currently being handled by e-mail support. The reference number(s) used are:

CAS-54638 - Tmueller

NOTE: We have sent you an email on the address that you have registered over the forums with.

Should you require any updates or further information, kindly contact us using the support form at the following link:

http://support.gfi.com/supportrequestform.asp




Sven Berger -> RE: User Experience with EventsManager 8.0 BETA 1 (1.Apr.2008 2:50:40 AM)

Hi Tmueller,

you were enquiring about the status of this case.

Unfortunately, this case was put closed and archived after the re-install. However, I guess you would still like to carry out the upgrade if given the opportunity I guess.

I have contacted the Support Agent who was dealing with your case to discuss the next steps in order to get yout to a fully functioning EVM 8 installation.




Tmueller -> RE: User Experience with EventsManager 8.0 BETA 1 (1.Apr.2008 3:21:45 PM)

Yes, I would like to carry out an install, but I don't want to lose all my custom rules and queries.

I was not aware that ya'll closed this case, so I opened another post the other day (Upgrading to Version 8 problems - overlaying of custom rulesets and Queries) to get user comments on their experiences with the upgrade which was a mistake.

The response from you guys was "Regarding your specific question, you shouldn't have to use print screen on every rule. Have a look at the selmcfg6.mdb file mentioned above. In there you find the table "RULES" in there you will notice that every Ruleset has a unique "profileID". The priority of every rule is unique WITHIN the ruleset in which it resides. With a little bit of "Access", you should be able to re-create the rule-sets much faster than using print screen."

Well I opened the selmcfg6.mdb file and the table only lists the names of the rules and their priority numbers.  It does not show the advanced conditions I created for each rule.   That is why I was mentioning I would have to do screen prints. 




Sven Berger -> RE: User Experience with EventsManager 8.0 BETA 1 (1.Apr.2008 5:07:22 PM)

Hi Tmueller,

that was actually me who suggested that. Yes, the Rules-table is not the only one if you have advanced conditions. But I thought it would be a good starting point given that I was not aware of your old case which is lying dormant.

Personally, I'm trying to get people to look at the files that are available to them in the installation folder. A bit of digging can often go a long way.

Either way, I have contacted the agent who was dealing with your case and I hope that you will come to a satisfactory solution. 




Page: [1]