Article Number
000001684
Applies To
RSA Product Set: Security Analytics, NetWitness Logs & Network
RSA Product/Service Type: Reporting Engine
RSA Version/Condition: 10.4.x, 10.5.x, 10.6.x, 11.x
Platform: CentOS
O/S Version: EL6, EL7
Issue
The reports attached in an email notification are zipped by default in RSA Security Analytics / NetWitness Platform.
Cause
When the Security Analytics / NetWitness Logs & Network Reporting Engine sends reports via SMTP, the attached reports in the email notification will be compressed into .zip files.
Compression can be disabled if required.
Resolution
In order to disable compression in SMTP notifications in RSA Security Analytics / NetWitness Logs & Network, follow the steps below.
- In the Security Analytics / NetWitness UI, navigate to Administration -> Services.
- Click on the drop-down icon under the Actions column for the Reporting Engine.
- Select View -> Config in the drop-down.
- Click on the Output Actions tab.
- Under the SMTP Configurations section, remove the check from the Enable Compression option.
- Click on the Apply button.
After making the change above, reports sent via SMTP will no longer be sent in a .zip format.
If you are unsure of any of the steps above or experience any issues, contact RSA Support and quote this article ID for further assistance.