Hello, Few days back I was trying to re-image one appliance to Pack
Hybrid on v10.6, I followed all the proper steps mentioned in the
attached document to re-image an appliance, but at the end of the
process it's showing me error related to some pack...
Dear All,In my environment, we have two servers which are running on MS
Windows Server 2012 R2 Core without GUI, so only I can type the commands
to do any configuration on them.So now my concern here is that how I can
integarte those two servers in R...
Dear All,Below is the error message which I am getting after integrating
of the machine on Windows Legacy in RSA SA.So after every attempt of
integrating this new event source, I could see only one log in
investigation and then it get stoppped after ...
Hello, Is there any one who knows how to use warehouse anaytics.As I
have a SAW, and have a requirement of running 10 reports for last 10
months with raw logs and with some slecected metas. So the problem what
i face during scheduling the reports is ...
Hello, There is a report which I had run it on 14th October in
warehouse, but the issue with it is it's still running.This is the 6th
day of running the report. Is there any way of checking whether is their
any issue with the rule used to run report ...
Hi Rasnick, I believe I am so close to solve that issue, I noticed on
the event source itself that event logging service getting crashed after
generating one single event. So that’s why SA is unable to collect the
logs. Will check with the Windows te...
The official recommended EPS for Log Decoder is 30K is the maximum what
Log Decoder can handle. But log decoder can also handle upto 80K EPS but
only for very short time or otherwise it would be crashed. VLC can
handle upto 5K-8K EPS, but can be incr...
Then you can use live module option from there you can download ootb
rules and dashboard and it would be directly deployed in your SA RE from
there you can add modify or whatever. Pls refer to sadocs for how to use
live module. Regards,Deepanshu Sood...
I'm not sure that how we can set it on LD. But you can set it on log
collector..under>config>event sources>syslog>choose udp or tcp>then
mention whatever port you want and it would start listening syslogs from
that port what you mentioned. Regards,De...