This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
Register Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
NetWitness Discussions

Live Content in RSA

Sachin
Contributor
Contributor

‎2021-03-22 07:06 AM - edited ‎2021-03-22 07:06 AM

Hi All,

 

Can i Modify rules in live content as per our requirement?

Labels:
0 Likes
2 REPLIES 2

JoshRandall
Valued Contributor Valued Contributor
Valued Contributor

‎2021-03-23 04:53 PM

Certainly.  Once you deploy Live rules to your NetWitness environment, you can modify those rules directly or create copies and customize the copies to meet your needs/use cases.

 

Are you having any issues modifying certain rules?


Mr. Mongo

lukaszczerwonka
Occasional Contributor
Occasional Contributor

‎2021-03-31 04:47 AM

Use 'Show Syntax' button, copy the EPL and create new Advanced EPL rule and customize 

BR Lukasz Czerwonka, Mediarecovery
© 2022 RSA Security LLC or its affiliates. All rights reserved.