This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject

NetWitness Community

  • Home
  • Products
    • NetWitness Platform
      • Advisories
      • Documentation
        • Platform Documentation
        • Known Issues
        • Security Fixes
        • Hardware Documentation
        • Threat Content
        • Unified Data Model
        • Videos
      • Downloads
      • Integrations
      • Knowledge Base
    • NetWitness Cloud SIEM
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Detect AI
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Investigator
    • NetWitness Orchestrator
      • Advisories
      • Documentation
      • Knowledge Base
      • Legacy NetWitness Orchestrator
        • Advisories
        • Documentation
  • Community
    • Blog
    • Discussions
    • Events
    • Idea Exchange
  • Support
    • Case Portal
      • Create New Case
      • View My Cases
      • View My Team's Cases
    • Community Support
      • Getting Started
      • News & Announcements
      • Community Support Forum
      • Community Support Articles
    • Product Life Cycle
    • Support Information
    • General Security Advisories
  • Training
    • Blog
    • Certification Program
    • Course Catalog
      • Netwitness XDR
      • EC-Council Training
    • New Product Readiness
    • On-Demand Subscriptions
    • Student Resources
    • Upcoming Events
    • Role-Based Training
  • Technology Partners
  • Trust Center
Sign InRegister Now
Enter a search word
    Turn off suggestions
    Enter a search word
      Turn off suggestions
      Enter a user name or rank
        Turn off suggestions
        Enter a search word
          Turn off suggestions
          Enter a search word
            Turn off suggestions
            cancel
            Turn on suggestions
            Showing results for 
            Search instead for 
            Did you mean: 
            NetWitness Discussions
            • NetWitness Community
            • Discussions
            • False alarm health & wellness
            • Options
              • Subscribe to RSS Feed
              • Mark Topic as New
              • Mark Topic as Read
              • Float this Topic for Current User
              • Bookmark
              • Subscribe
              • Mute
              • Printer Friendly Page

            False alarm health & wellness

            EricBarreto
            EricBarreto Beginner
            Beginner
            Options
            • Mark as New
            • Bookmark
            • Subscribe
            • Mute
            • Subscribe to RSS Feed
            • Permalink
            • Print
            • Report Inappropriate Content

            ‎2020-07-06 04:22 PM

            I created a policy to generate an alarm whenever the log decoder server is above 90% of memory usage.

            However, it has generated several false positives, since the log decoder server keeps most of the memory in buffer / cache and health & wellness does not recognize this as free memory, it only recognizes the free attribute.

            Is there any way to resolve this issue? Or some other way to receive real alerts mainly using the available attribute and not the free one.

            • Community Thread
            • Discussion
            • Forum Thread
            • Health & Wellness
            • NetWitness
            • netwitness 11.3
            • NW
            • NWP
            • RSA NetWitness
            • RSA NetWitness Platform
            0 Likes
            Reply
            • All forum topics
            • Previous Topic
            • Next Topic
            1 REPLY 1

            RobertCrawfordJ
            Employee RobertCrawfordJ
            Employee
            Options
            • Mark as New
            • Bookmark
            • Subscribe
            • Mute
            • Subscribe to RSS Feed
            • Permalink
            • Print
            • Report Inappropriate Content

            ‎2020-07-07 11:34 AM

            Eric,

             

            I’ve received a couple of emails from you, but I don’t think that I am the right person to help you.

            I believe that you would have better luck if you posted your questions here:

            https://community.rsa.com/community/products/netwitness/knowledge-base

             

            Regards,

            Bob

             

            Bob Crawford | Sr Instructional Designer | RSΛ

            Cell: 781-475-0198 | robert.crawford@rsa.com<mailto:robert.crawford@rsa.com> | RSΛ University<https://community.rsa.com/community/training>

            0 Likes
            Reply
            li.common.scroll-to.top
            Powered by Khoros
            • Blog
            • Events
            • Discussions
            • Idea Exchange
            • Knowledge Base
            • Case Portal
            • Community Support
            • Product Life Cycle
            • Support Information
            • About the Community
            • Terms & Conditions
            • Privacy Statement
            • Acceptable Use Policy
            • Employee Login
            © 2022 RSA Security LLC or its affiliates. All rights reserved.
            Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.