Maybe a feature to reset the ECAT IIOC rules will be good, tried to play
with the rules, seems mess up. Also reset function for all the data if
possible. What you guys thought?
After upgraded to 4.2.0.2, when i tried to save live configuration, got
error: { "Port": 0, "ResponseStatus": { "ErrorCode": "Could not store
into lockbox", "Message": "Could not store into lockbox", "Errors": []
}} Any advise?
Support has a list of parsers which have performance issue, how they
know? Experience? We're going to develop some custom parsers for
customer and customer wants to know the performance impact, any idea how
can we check? Thanks.
Support has Incident Management integration guide, you may get the
details from them. I found this is so difficult to do as if you missed
out something, the IM will not tell you any error, and there will no
incident created. Not sure about V11.
Check below two files, usually it's due to appliance when bootup, some
script failed to run? If possible,re-deploy the VLC? [root@logcNd
puppet]# cat csr_attributes.yaml custom_attributes:
1.2.840.113549.1.9.7:
fqdn=logcNd,ipaddress=192.168.112.102,t...
For Netwitness logs/packets, there is reset function, how endpoint,
maybe can come out a function also. When deploying in enterprise, not so
easy to restore DB. Another question is, for the Risk Score, can we
control it? So if we reset the DB, what h...
