The Home page widgets "Network threats detected" & "Virus detected" will continue showing data for the old events, even after an administrator performs one of the following cleanup activities:
Deletion of Guest VMs on which events are generated.
Explicit Re-registration of NSX and SVA by administrator.
Network Threat detected & Virus Detected graphs continues to display the data, whereas no data is displayed for "Top 10 GVMs with network threats remediated" & "Top 10 GVMs with virus threats remediated".
The graph displayed under "Network threats detected" & "Virus detected" should not display any data, once clean up is done and post clean up a new SVA is registered . This creates confusion since the other data for the Top 10 GVMs is not displayed.
This event data will get cleaned/purged based on the event purging configurations.
However the other two widgets "Top 10 GVMs with network threats remediated" and "Top 10 GVMs with virus threats remediated" will always be in sync with the Guest VM inventory.
Install SVA on the cluster
On vSphereWeb client create a security group and apply a security policy
Access some AV threats & network threats on the GVMs, such that the graph on home page displays some data ("Network Threat Detected", "Virus Detected", "Top 10 GVMs with network threats remediated" & "Top 10 GVMs with virus threats remediated).
Unbind the security policy from the security group. Delete the security group & security policy
Un-deploy SVA from the cluster
Login to web UI & navigate to Integration page . Unregister the DCS:S server from the NSX
Un-register DCS with UMC
Register DCS with UMC by running registerProduct.bat script
Login to Web UI and under integration page , again import & register DCS:S service with NSX
Deploy SVA on the cluster again & wait till it is registered with Server
Imported Document ID: TECH228430
Subscribing will provide email updates when this Article is updated. Login is required.