Hello Suresh,it might be because the meta was generated from an App
rules. And some changes could have been occurred during the upgrade
disabling "old syntax AppRules", From the Decoder>Config>Apprule. Just
create a new app rules based on the did (de...
Hello Gayathry, this is probably because the VLC doesn't have enough
resources to stop the process.Refer to hardware requirements and modify
your hardware accordingly: (search virtual log collector)Virtual Host
Setup: Basic Deployment If you would ru...
Hello Harold, https://community.rsa.com/docs/DOC-83630 Please use the
App rules.The way should be:ip.dst='yourIP' && url='ptsecurity.com' -->
This triggers an alert on alert.id with the name you specify in the
apprule. To find the correct syntax inve...
Hello Marinos,a quick workaround for NW 10.6.x is to add the
following.Open ESA command line and type: crontab -u root -e#FOR ESA db
12 3 20 * * root service puppet stop15 3 20 * * root service rsa-esa
stop && echo 'db.alert.reIndex()' | mongo esa -u...
Hello Jefferson, this is a normal behavior. In Nw11 when an upgrade is
applied it is done through hosts view (since you apply the upgrade from
hosts page and to all of the hosts), but from the service view we do not
push/apply updates to all of the c...
