This on-demand learning will enable you to troubleshoot RSA NetWitness Logs & Network Event Stream Analysis (ESA) Rules.
This self-paced on-demand learning will improve your understanding of how to troubleshoot RSA NetWitness Logs & Network Event Stream Analysis (ESA) rules. While troubleshooting ESA in general is an important skill, the #1 issue in the field is troubleshooting ESA rules in particular. With "just show me" videos, this course addresses the most common reasons that rules don't work. It first discusses ways to determine whether or not it is a "rule issue." It outlines the most common “rule issues" and provides approaches to resolving them. The course continues with tips, tricks, and tools for troubleshooting rules and general strategies for working with rules. It also will help you avoid some common "Gotchas." The content is designed for troubleshooting the 10.x versions of the product.
Anyone interested in troubleshooting ESA EPL rules
Delivery Type On-Demand Learning
Students should have completed the following courses (or have equivalent knowledge) prior to taking this training: