Running into an issue, we have a DC that we want system logs etc pulled
into SA. The issue of course is Domain Controllers do not contain local
user/groups. Is there an easy work around without major administrative
work to get this functioning on a D...
Hi Everyone, We currently have the RSA SA logging several different
sources and was hoping to run a scheduled report of the EPS by log
collector and if possible even event source (cisco ASA, windows etc).
I've combed through available documents but n...
I've reviewed the document, it's expected that the service account be
added to the local Log Readers group. As you know, this can't be done on
DC's since local users and groups do not exist. Hence the only way I can
think of doing this is using the d...
Excellent script Lee, I know this is asking for quite a bit but is there
a way to easily tweak it so that it can accumulate the EPS and give you
an average EPS say per hour(s) days etc?
Thanks everyone for the info. The issue is we have multiple collectors
handing logs off to SA and I need to be able to get an EPS rating for
individual collectors and even if possible, more granular - EPS per
event source. I appreciate the assistance...
