How to use getstatsdata to gather statistical data for troubleshooting

Technical Articles ID: KB83480
Last Modified: 10/18/2021

Environment

McAfee SIEM Enterprise Security Manager (ESM)11.x
McAfee SIEM Event Receiver (Receiver) 11.x

Summary

You can use the getstatsdata program to gather statistical data to help with troubleshooting problems. You can gather data from McAfee SIEM devices, including the ESM, IPS, and Receiver.

The output can be displayed to the console, formatted for a hyperterm session, or placed on a USB mass-storage device.

The syntax is:

getstatsdata [-d DEVICE] [-v VIPSID] [-u|-c|-t] [-h|--help]

Explanation of command-line options:

d – Type of device: Nitro IPS, ESM, NRC. The default is Nitro IPS.
v – Virtual Device ID used to determine which rules files to use when running against the Nitro IPS. It defaults to the base device when running in console or hyperterm mode. It defaults to all rules files when running in usb or standard mode.
u – Creates a tarball from the statistics data on the system, calls loadusbkey, and copies the tarball to the USB mass-storage device before unmounting the USB device with the unloadusbkey program.
c – Outputs statistics files to the screen. Use this option when running the program from the ESM terminal page.
t – This option is similar to the c option, but it reminds the user to adjust their hyperterm text capture settings before pressing Enter to continue.
h (or help) – Displays information about how to use the program.

NOTE: Without the u, c or t command-line options, this program creates a tarball of important system information. You can specify the location and name of this tarball using the o option. If the o option is not used, the tarball is placed in the /root/Stats-Backup directory with a file name of StatsBackup-<today's date>.tgz.

Related Information

Affected Products

Diagnostic Data Collection
SIEM Advanced Correlation Engine 11.5.x
SIEM Advanced Correlation Engine 11.4.x
SIEM Advanced Correlation Engine 11.3.x
SIEM Advanced Correlation Engine 11.2.x (EOL)
SIEM Advanced Correlation Engine 11.1.x (EOL)
SIEM Enterprise Log Manager 11.4.x
SIEM Enterprise Log Manager 11.3.x
SIEM Enterprise Log Manager 11.2.x (EOL)
SIEM Enterprise Security Manager 11.5.x
SIEM Enterprise Security Manager 11.4.x
SIEM Enterprise Security Manager 11.3.x
SIEM Enterprise Security Manager 11.2.x (EOL)
SIEM Enterprise Security Manager 11.1.x (EOL)
SIEM Event Receiver 11.5.x
SIEM Event Receiver 11.4.x
SIEM Event Receiver 11.3.x
SIEM Event Receiver 11.2.x (EOL)
Troubleshooting

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Portuguese Brasileiro

Knowledge Center

How to use getstatsdata to gather statistical data for troubleshooting

Environment

Summary

Related Information

Affected Products

Languages:

Title

Title

Knowledge Center

How to use getstatsdata to gather statistical data for troubleshooting

Environment

Summary

Related Information

Affected Products

Languages:

Choose your region

Title

Title