2017-11-13 04:20 AM
Some background:
I have a script writing files directly to the upload folder so I'm not using the sftp agent. There are 4 types of files being written and I only want to keep and process 3/4 types.
I am looking for either:
-Exclude files beginning with a specific name (ideally deleted right away from the upload/* folder before they are processed)
or
-Exclude the events that were in the above files after they are read.
RSA official documentation is only missing any information about "Event Filter". In fact, the screenshot in the guide is probably taken from a different version than the one described on the article (10.6.3) since the "Event Filter" is missing completely.
https://community.rsa.com/docs/DOC-75038
Thanks
Marinos
2017-11-13 09:59 AM
Apparently this is configurable in the File Collection page of the VLC; The right hand dropdown menu that says Config, also has a "Filter" option and so the filters are configured from there.
Courtesy of Emmanuele La Porta:)
To RSA SADOCS team: Please sort out your documentation and take screenshots for version specific features from current versions of the software! Reading documentation shouldn't be like a quiz.
2017-11-13 10:55 AM
Hello Marinos,
this is Emmanuele (from Linkan's account I could add the reply):
This the link you were looking for it is already in the guide:
Log Collection Config: Configure Event Filters for Log Collector
Have a good one.
Regards Emmanuele