How to do parser via RSA NetWitness Log Parser Tool? I can not know how
to do.I tried. but it is not worked properly.Can you provide some guide?
I am parsing with window logs.I thinks it is Supported Event Sources of
RSA.Can you provide the parsered ...
Hi Dave.Thanks for the reply. I want to know 2 things more.. 1. Can I
know how to download the winevent_snare parser from Live? 2. And I want
to do parser like this below for examplelog -> a b c d e f gmessage
id(msg.id) -> b_d_eCould you please teac...
Hi, No, I didn't enable winevent_snare parser. I just made as new for
winevent_snare parser. Could you please provide XML file of this? Can I
enable of all meta in the table-map.xml file? It could be impact for
performance of RSA? Could you teach me ...
Hi, We are collecting window logs via snare agent.Could you please
provide XML file of this? I have to extract(for display in "View Meta"
tab of RSA SIEM) all part of window logs as customer's request. So I
tried to extract with process_id, event.cat...
Hi, RSA support team. I tried to extract data on "meta data" tab(I'm not
sure exactly tab name) with process_id, event.cat.name, process,
event_time, h_code, account_id, hostname, event_description and so on.
But on "meta data" tab, it was shown part...
