Hello Stewart: For the older data prior to making the change, yes. Once
configured, though, RSA Netwitness is great at helping you dig through
what's important versus what is just noise - Like most strong advanced
SIEM systems, that usually requires ...
Hello Stewart. When meta is configured as "flags=Transient" it is held
in memory and used by application rules or any other parsing that may
occur on the Decoder, but once that parsing is complete, the meta is no
longer needed and deleted. By configu...
