The reports attached in an email notification are zipped by default in RSA Security Analytics / NetWitness Platform.
When the Security Analytics / NetWitness Logs & Network Reporting Engine sends reports via SMTP, the attached reports in the email notification will be compressed into .zip files. Compression can be disabled if required.
In order to disable compression in SMTP notifications in RSA Security Analytics / NetWitness Logs & Network, follow the steps below.
In the Security Analytics / NetWitness UI, navigate to Administration -> Services.
Click on the drop-down icon under the Actions column for the Reporting Engine.
Select View -> Config in the drop-down.
Click on the Output Actions tab.
Under the SMTP Configurations section, remove the check from the Enable Compression option.
Click on the Apply button.
After making the change above, reports sent via SMTP will no longer be sent in a .zip format.
If you are unsure of any of the steps above or experience any issues, contact RSA Support and quote this article ID for further assistance.