Cisco Bug: CSCsz17853 - CS-MARS: Report start times drifting
Feb 22, 2014
- Cisco Security Monitoring, Analysis and Response System
Known Affected Releases
Symptom: In MARS 4.3.x/5.3.x scheduled hourly reports always correctly started at precisely 2 minutes after the hour, by design. (That is the first-run report would start then). Since MARS 6.0.1 there is a cumulative "drift" in the time the first scheduled hourly report starts. For example assume that all of the scheduled hourly reports combined take 10 seconds to execute. At the first hour the first scheduled hourly reports correctly start as designed at exactly 2 minutes after the hour. But for the second hour the first scheduled hourly reports incorrectly starts at 2 minutes and 10 seconds after the hour. The next hour it is two minutes and twenty seconds after the hour, etc. Note that other changes in MARS 6.0.3 indirectly cause the amount of drift in scheduled reports to be much less than in MARS 6.0.1/6.0.2. The problem is still there in 6.0.3, but to a very significantly less degree. Conditions: Only occurs with scheduled reports.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases