Hi veer, All components are managed/installed by primary admin server
only. Secondary admin server sync with a copy of primary admin server
and whenever you fail-over it'll use the last sync to make itself
active. Regards, Kv
Hi @Gambit You can use the context hub lists and use it in your ESA
statement with Whitelist condition. You can refer to below discussion:
https://community.netwitness.com/t5/netwitness-discussions/using-context-hub-lists-for-whitelisting-in-esa-rule...
