"Alert Removal Tool" feedback thread

Peter

The Alert Removal Tool for PM 10 (Win32) is now available for download.

 

-          ftp://ftp.f-secure.com/support/tools/alerttool/alerttool.zip

-          ftp://ftp.f-secure.com/support/tools/alerttool/readme.txt

Feel free to post your questions, comments, suggestions etc. via this thread.

s_f

May I delete  by hostname?  only date?

Do you have a tool for LINUX?

Peter

 

>May I delete  by hostname?  only date?

 

Currently selection is only possible using the date criteria (+ "delete all alerts" option).

>Do you have a tool for LINUX?

Not yet

mrfusion

Tested deleting a single date -> ok

tested deleting a range -> ok

 

working fine for me

laksse

 

Hello,

 

i am not sure that i found one bug from this tool that i can able to use the future date as well as results was showing deleted like that .. have you tried before when you tested this delete alerts by date /date range..

 

thanks

sethu

Peter

Hi Sethu,

 

Congratulations on your first post on the Community and for posting the first bug report for Alert Removal tool!

 

I believe you're referring to the validation issue visible below:

 

Connection to the database successful.
Input the FROM date in the following format 'dd.mm.yyyy': 31.12.5000
Input the TO date in the following format 'dd.mm.yyyy': 01.05.5005
The selected alerts are deleted!

-------------------------------------------------------------------
Please chose a number from the following available actions:
1 - LIST ALERTS
2 - DELETE ALERTS BY DATE
3 - DELETE ALERTS BY DATE RANGE
4 - DELETE ALERTS OLDER THAN  DATE
5 - DELETE ALL ALERTS
0 - EXIT
-------------------------------------------------------------------

INPUT NUMBER: 0

It seems all the functions return the same message, regardless of the whether any alerts actually matched the specified date or not. Should be easy to fix but I guess we can agree, not a showstopper for using the tool.

 

stmarti

NOT works! Trying to delete all alerts and got

 

"Unable to connect to database"

Please make sure that you have stopped...

 

Same for all other option.0

The fsms service is of course stopped, registry modified etc. What's now?

 

Peter

 

Did you use the clipboard to enter the registry value (step 3) from the txt file? This will not work as the hyphen character which precedes the actual key is pasted incorrectly.

 

Just open the relevant registry path and delete the hyphen ("-") in front of the "DodbcConnectorEnabled" string, then re-enter the value.

 

Then repeat steps 4 and 5 (start + stop service).

 

Any help?

 

stmarti

This fixed, thank you.

 

Please add this to the readme.txt (or change the text to the correct hyphen).

Copying the net stop "F-Secure Policy Manager Server" also not works, because the double quote is different what the command prompt expects.

Peter

Hi,

Thank you for your valuable input. I fixed the issues and updated the file on ftp.

 

MarcinD

Hello,

 

Is there a mistake in the instruction?

The string I put to the registry isn't work "-DodbcConnectorEnabled=true".

I think that correct string is "-DodbcConnectorEnabled".

I'm right?

Could you change readme.txt?

 

Best regards,

Peter

 

Hi,

 

The string in the readme is correct. Did you use clipboard to paste the data? As the readme has it, this will not work.

To fix the issue, open the relevant registry path and delete the hyphen ("-") in front of the string then re-enter the character.

 

Then repeat steps 4 and 5 (start + stop service).

 

Any help?

 

 

Dmitriy

Hi,

 

Please note that Policy Manager 10.01 provides a possibility to remove alerts. You can continue using the alert removal tool if you wish, but it's probably handier and less error-prone to do that in PM Console.

garlangreeny

So far, I haven't found any problems using it. I just followed the whole instruction provided and it works.