To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

"Alert Removal Tool" feedback thread

Peter
Peter Posts: 127 Threat Terminator
in Business Suite

The Alert Removal Tool for PM 10 (Win32) is now available for download.

 

-          ftp://ftp.f-secure.com/support/tools/alerttool/alerttool.zip

-          ftp://ftp.f-secure.com/support/tools/alerttool/readme.txt

Feel free to post your questions, comments, suggestions etc. via this thread.

Comments

  • s_f
    s_f Posts: 1 W/ Former Staff

    May I delete  by hostname?  only date?

    Do you have a tool for LINUX?

  • Peter
    Peter Posts: 127 Threat Terminator

     

    >May I delete  by hostname?  only date?

     

    Currently selection is only possible using the date criteria (+ "delete all alerts" option).

    >Do you have a tool for LINUX?

    Not yet Smiley Happy
  • mrfusion
    mrfusion Posts: 7 Security Scout

    Tested deleting a single date -> ok

    tested deleting a range -> ok

     

    working fine for me Smiley Wink

  • laksse
    laksse Posts: 1 Security Scout

     

    Hello,

     

    i am not sure that i found one bug from this tool that i can able to use the future date as well as results was showing deleted like that .. have you tried before when you tested this delete alerts by date /date range..

     

    thanks

    sethu



  • Peter
    Peter Posts: 127 Threat Terminator

    Hi Sethu,

     

    Congratulations on your first post on the Community and for posting the first bug report for Alert Removal tool!

     

    I believe you're referring to the validation issue visible below:

     

    Connection to the database successful.
    Input the FROM date in the following format 'dd.mm.yyyy': 31.12.5000
    Input the TO date in the following format 'dd.mm.yyyy': 01.05.5005
    The selected alerts are deleted!

    -------------------------------------------------------------------
    Please chose a number from the following available actions:
    1 - LIST ALERTS
    2 - DELETE ALERTS BY DATE
    3 - DELETE ALERTS BY DATE RANGE
    4 - DELETE ALERTS OLDER THAN  DATE
    5 - DELETE ALL ALERTS
    0 - EXIT
    -------------------------------------------------------------------

    INPUT NUMBER: 0

    It seems all the functions return the same message, regardless of the whether any alerts actually matched the specified date or not. Should be easy to fix but I guess we can agree, not a showstopper for using the tool.

     

  • stmarti
    stmarti Posts: 27 Security Scout

    NOT works! Trying to delete all alerts and got

     

    "Unable to connect to database"

    Please make sure that you have stopped...

     

    Same for all other option.0

    The fsms service is of course stopped, registry modified etc. What's now?

     

  • stmarti
    stmarti Posts: 27 Security Scout

    This fixed, thank you.

     

    Please add this to the readme.txt (or change the text to the correct hyphen).

    Copying the net stop "F-Secure Policy Manager Server" also not works, because the double quote is different what the command prompt expects.

  • Peter
    Peter Posts: 127 Threat Terminator

    Hi,


    Thank you for your valuable input. I fixed the issues and updated the file on ftp.

     

  • MarcinD
    MarcinD MyAccount Posts: 1 Security Scout

    Hello,

     

    Is there a mistake in the instruction?

    The string I put to the registry isn't work "-DodbcConnectorEnabled=true".

    I think that correct string is "-DodbcConnectorEnabled".

    I'm right?

    Could you change readme.txt?

     

    Best regards,

  • Peter
    Peter Posts: 127 Threat Terminator

     

    Hi,

     

    The string in the readme is correct. Did you use clipboard to paste the data? As the readme has it, this will not work.

    To fix the issue, open the relevant registry path and delete the hyphen ("-") in front of the string then re-enter the character.

     

    Then repeat steps 4 and 5 (start + stop service).

     

    Any help?

     

     
  • Dmitriy
    Dmitriy Posts: 179 Threat Terminator

    Hi,

     

    Please note that Policy Manager 10.01 provides a possibility to remove alerts. You can continue using the alert removal tool if you wish, but it's probably handier and less error-prone to do that in PM Console.

  • garlangreeny
    garlangreeny MyAccount Posts: 10 Security Scout

    So far, I haven't found any problems using it. I just followed the whole instruction provided and it works. image

This discussion has been closed.

Categories