Q: How do I generate "troubleshoot:" files to send to Sourcefire support?

A:

Update! Here's an easier way: just log in as root, run sf_troubleshoot.pl, then look for the results file in /var/tmp

It's in the "Defense Center User Guide", but the requests for troubleshoot files are so frequent that having the answer here will save time. (Also, the process is arcane!)

1. On the DC, select Operations > Monitoring > Health.
2. Mess with the little arrows until the appliance you are interested is visible in the list.
3. In the Sensors column of the appliance list, click the name of the appliance for which you want to view details in the health monitor toolbar.
4. Click "Generate Troubleshooting Files". This submits the generation job.
5. Select Operations > Monitoring > Task Status and find the job entry. When the job is complete you can download the file to your PC from there.