VA out of sync error message and Enterprise Security Manager displays a yellow flag even when no VA sources are in use

Technical Articles ID: KB84654
Last Modified: 9/13/2021

Environment

McAfee SIEM Enterprise Security Manager (ESM) 11.x
McAfee SIEM Event Receiver (Receiver) 11.x

Problem

Several data sources listed under an ESM or Receiver in the ESM user interface have a yellow flag. When you hover your cursor over the yellow flags, you see the following message:

VA out of sync

NOTE: This message is displayed even though there’s no Vulnerability Assessment (VA) being used on the system.

Cause

The VA out of sync error message can occasionally be set incorrectly.

Solution

To remove the flags:

Log on to the ESM using either SSH or the console.
Type the below command and press Enter:

nquery -d esm -q 'Update IPSChange set SyncStatus[2] = "F"'

After you complete these steps, the yellow flags are immediately removed from the ESM user interface.

Affected Products

SIEM Enterprise Security Manager 11.4.x
SIEM Enterprise Security Manager 11.3.x
SIEM Enterprise Security Manager 11.2.x (EOL)
SIEM Enterprise Security Manager 11.1.x (EOL)
SIEM Event Receiver 11.4.x
SIEM Event Receiver 11.3.x
SIEM Event Receiver 11.2.x (EOL)
SIEM Event Receiver 11.1.x (EOL)

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Portuguese Brasileiro

Knowledge Center

VA out of sync error message and Enterprise Security Manager displays a yellow flag even when no VA sources are in use

Environment

Problem

Cause

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

VA out of sync error message and Enterprise Security Manager displays a yellow flag even when no VA sources are in use

Environment

Problem

Cause

Solution

Affected Products

Languages:

Choose your region

Title

Title