2018-08-26 09:52 AM
Hello Guys,
After up-gradation to NW11.1, I have facing issue on ESA components/Module, I haven't deployed http-log alert in ESA service,But however alerts are flooding.
Can anyone help/suggest on the same promptly.Thanks!
Alert snap attached for the reference:
Thanks,
Suresh K
2018-08-27 02:36 PM
Hi Suresh,
Those alerts are generated by the ESA Analytics module, which can be found and configured under Admin -> System -> ESA Analytics. There are two C2 modules available for ESA Analytics: http-log and http-packet. The alerts you are seeing are for the http-log module.
You can read more about about configuring these options within the ESA Config guide: ESA Config: Mapping ESA Data Sources to Analytics Modules.