Hi, Please have a look at the below KB article, hope it
helps:https://community.rsa.com/docs/DOC-45451 I suggest singling out
all the IP addresses of the event source for which your logs are getting
parsed as 'unknown', you can do so by going to the ...
