I would like to create ESA alert based on below logic. Can any one
assist me to create it. Alert should tiger if value of two meta is not
same for the same events/session. metaA != metaB
How to create multi line parser ? Ex Logs : filed 1 = value1 filed 2 =
value2 field 3 = value3 i want to create parser for this kind of logs. I
am use to create parser for single line logs. But not multi line logs.
Automated Threat Detection for Log Decoder is not working. I have update
latest envision file on decoder and also proxy parser. But still it is
not working. We have two esa one for packet and one for logs. It is
working fine for packet but logs it is...
Hi Eric, My ESA output , How to check SD in it NAME KNAME MODEL RM RO
SCHED TYPE SIZE STATE MOUNTPOINTsda sda PERC H730P Mini 0 0 deadline
disk 931G running|-sda1 sda1 0 0 deadline part 1M|-sda2 sda2 0 0
deadline part 256G| |-netwitness_vg00-root dm-...
Have you successfully upgraded to 11.X from 10.6? Yes , We have upgraded
from 10.6.5 to 11.1 successfully Did you manage to do this without RSA
Professional Services? , Yes , i did it without PSHow long did it take
you? Depends on setup , how big is ...
