McAfee® Network Security Platform 6.0
System Fault Messages
60
Fault
Severity
Description/Cause
Action
Unarchived,
queued alert
count full
Error
Indicates that the Manager has
reached the limit (default of
100,000) of alerts that can be
queued for storage in the database.
Also indicates the number of
dropped alerts.
Alerts are being detected by
your Sensor(s) faster than the
Manager can process them.
This is evidence of extremely
heavy activity.
Try the following:
Check the alerts you are
receiving to see what is
causing the heavy traffic on
the Sensor(s). You may be
under a heavy attack.
Check your policies. You may
have enabled a very verbose
policy (for example, All-
Inclusive with Audit) which is
causing too many
alerts/packet logs to be sent
to the Manager, or packet
logging is excessive (for
example, packet logging is
enabled for entire flow for all
alerts).
Your Manager server may not
have sufficient disk
space/processing power to
accommodate the
number/rate of alerts your
Sensors are generating.
Rectify the situation in your
policies and let the queue
drain and write to the
database.
Unarchived,
queued packet
log count full
Error
Indicates that the Manager has
reached the limit (default of
100,000) of packet logs that can be
queued for storage in the database.
Also indicates the number of
dropped packet logs.
See the suggestions for the
fault ‘Unarchived, queued
alert count full.'
NTBA Sigfile
Update Error
Error
Indicates that there is an error in
the Signature set configuration
update.
Rre-try the NTBA
configuration update.
