000032540 - How to clear the alarms in Health and Wellness in the RSA Security Analytics UI

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Jul 28, 2017
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000032540
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: Health & Wellness
RSA Version/Condition: 10.5.x; 10.6.x
Platform: CentOS
O/S Version: EL6
 
TasksThis article explains how to remove alarms from the mongo sms database and thus remove them from the alarms page in Health and Wellness screen in the Security Analytics WebUI. 
ResolutionTo permanently delete alarms, perform the steps below.
  1. Connect to the Security Analytics server via SSH as the root user.
  2. Access the SMS Database. 
mongo sms
TokuMX mongo shell v1.4.2-mongodb-2.4.10
connecting to: sms
>

  1. The ">" prompt indicates you are now in Mongo SMS Database. 
  2. Issue the following command to permanently delete all the alarms in the mongo sms database and from the Health & Wellness screen in the Security Analytics WebUI. 
db.sms_thresholdstate.remove({})

  1. Exit from the mongo sms database tool gracefully.  
quit()

  1. Restart the collectd service. 
service collectd restart

  1. Restart the SMS service.
service rsa-sms restart

If you are unsure of any of the steps above or experience any issues, contact RSA Support and quote this article number for further assistance.
 

Attachments

    Outcomes