Hi, Log Collector or rather rabbitmq stores the queued messages on disk
in /var/lib/rabbitmq/mnesia/sa@/msg_store_persistent. It gets
written to disk until the /var/netwitness partition gets full. You will
start seeing rabbitmq disk threshold warning...
Hi @susui Original alerts are basically raw alerts respond receives from
ESA. Once the raw alert comes into respond, it goes through a process
called normalization which is basically mapping fields from raw alert to
user known meta keys. The end aler...
Hi Sanjiv, I don't think we support any exceptions as of now. Any
changes made under Security -> Settings will apply to all users in NW.
Please raise an Enhancement ticket if you feel so after contacting with
CS/PS. Regards,Eswar.
