Unable to query mail logs from the Message Tracking of the InterScan Messaging Security Suite (IMSS) web console

- Updated:
- 11 Oct 2017
- Product/Version:
- InterScan Messaging Security Suite 7.1 Windows
- InterScan Messaging Security Suite 7.5 Windows
- InterScan Messaging Security Suite 9.1 Linux
- Platform:
- Windows 2003 Enterprise
- Windows 2003 Standard
- Windows 2008 Enterprise
- Windows 2008 Standard

Summary

You cannot query mail logs from the Message Tracking of IMSS. The imss manager log, imssmgr.<date>.<count>, shows error similar to the following:

2008/02/28 00:02:30 GMT-05:00 [1104:1500] [LogImporterThd][..\src\LogImporterThd.cpp][591] Exception occurred: _tm_LOG_text_log_cursor_imp_base::setCurrentInfo : invalid argument

2008/02/28 00:02:40 GMT-05:00 [1104:1492] [LogImporterThd][..\src\LogImporterThd.cpp][1448] Exception occurred: _tm_LOG_text_log_cursor_imp_base::setCurrentInfo : invalid argument

Details

To resolve the issue:

Back up the policy_event_bookmark file, which is located in <imss_installation_folder>\bin. By default, the folder name is C:\Program Files\Trend Micro\IMSS\bin.
Stop the IMSS services.
Delete the current policy_event_bookmark file.
Create a new policy_event_bookmark file.
Open the new file and put the following parameter:
0000000000000000.polevt.imss.20080401.0001

Note:
0000000000000000 - To reset the bookmark and upload the latest log entry to the database against the date defined.
20080401 - If the user wants to query logs from the previous dates, edit the defined date then save. (Ex: 20080303)
Save and close the file.
Start the IMSS services.
Log on to the IMSS web console.
Go to Logs > Query to query the mail logs.