Preview Tool

Cisco Bug: CSCsz17853 - CS-MARS: Report start times drifting

Last Modified

Feb 22, 2014

Products (1)

  • Cisco Security Monitoring, Analysis and Response System

Known Affected Releases


Description (partial)


In MARS 4.3.x/5.3.x scheduled hourly reports always correctly started at precisely 2 minutes after the hour, by design. (That is the first-run report would start then).  Since MARS 6.0.1 there is a cumulative "drift" in the time the first scheduled hourly report starts.  For example assume that all of the scheduled hourly reports combined take 10 seconds to execute.  At the first hour the first scheduled hourly reports correctly start as designed at exactly 2 minutes after the hour.  But for the second hour the first scheduled hourly reports incorrectly starts at 2 minutes and 10 seconds after the hour.  The next hour it is two minutes and twenty seconds after the hour, etc.

Note that other changes in MARS 6.0.3 indirectly cause the amount of drift in scheduled reports to be much less than in MARS 6.0.1/6.0.2.  The problem is still there in 6.0.3, but to a very significantly less degree.


Only occurs with scheduled reports.
Bug details contain sensitive information and therefore require a account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.