Hi Guys, I am trying to figure out if there is a way on RSA SA to create
reports of network activity or EPS for a particular host.I am new to the
platform and not familiar with the reporting module. Any help is
If you are creating a rule using the reporting engine, maybe something
like this could work. You could create a list of all your SQL servers
using ip or hostname then create this rule: [Rule name]Select:
ip.srcWhere: reference.id = '4624' && user.dst...