• Report to show count of unique combinations

    Hi folks, I've been having some difficulties trying to setup a report that will only show a count of unique combinations of two fields.  Doing a count works for one field, but I can't seem to combine it to show ...
    RSA Admin
    last modified by RSA Admin
  • 'Type' field in Firewall Accounting

    Can anyone out there tell me with an accuracy of say...  hell its friday... 70% or better, just exactly what the "Type" field found within the Firewall Accouting Address Symmary and Firewall Acccounting Port Summ...
    RSA Admin
    last modified by RSA Admin
  • eEye Retina Network Security Scanner VA-tool support

    This would be nice. It's quite common VA-tool and some other SIEM vendors support for it already.  Other good VA-tools such as Qualys and nCircle are much more expensive for smaller companies. That's why you...
    RSA Admin
    last modified by RSA Admin
  • Monitored Device Information Report

    Hello All!   I was looking to modify a 'canned' report that is created via click of the button from the Overview->Devices->Manage Monitored Devices.  I like the report but wanted to modify a few thin...
    RSA Admin
    last modified by RSA Admin
  • Sophos Puremessage

    Anyone else interested in native support for Sophos Puremessage (for Unix) ?
    RSA Admin
    last modified by RSA Admin
  • Secure Computing WebWasher

    Anyone else interested in native support for Secure Computing WebWasher?
    RSA Admin
    last modified by RSA Admin
  • TrendMicro IWSS and IMSS

    Anyone else interested in native support for TrendMicro IWSS and IMSS?
    RSA Admin
    last modified by RSA Admin
  • EMC SMARTS

    Anyone else interested in native support for EMC SMARTS?
    RSA Admin
    last modified by RSA Admin
  • Citrix Presentation Server / XenApp

    Anyone else interested in native support for Citrix Presentation Server 3.x, 4.x, or the new XenApp?
    RSA Admin
    last modified by RSA Admin
  • Oracle Identity Manager OIM

    Anyone else interested in native support for Oracle Identity Manager (OIM)?
    RSA Admin
    last modified by RSA Admin
  • Fedora 6

    I'm trying to use the defalut rhlinuxmsg.xml for logs coming from a Fedora 6 server.  I intend on using this as boiler plate for a new device type, Beacon from Great Bay Software.  In a sample log message th...
    RSA Admin
    last modified by RSA Admin
  • Device Grouping

    Anyone know how I can create a dynamic device group filter easily based on a Windows domain?  I was hoping I could create the group based on the "NIC Properties/Windows Domain Name" but that filter is apparantly ...
    RSA Admin
    last modified by RSA Admin
  • Best practise Cisco Router log configuration

    Hello,   I am looking for best practises how to configure Cisco routers and their logging. There are many options and levels and What I would like to know is what levels you are reporting to envision and what k...
    RSA Admin
    last modified by RSA Admin
  • Problems with Microsoft 2003 DHCP logs

    I am having issues getting Microsoft DHCP logs reliably.  It worked when the enVision was first set up but I am no longer getting any data.  I suspect this may have something to do with the way that Microsof...
    RSA Admin
    last modified by RSA Admin
  • Alerter cache

    We would like to see the Alerter cache changed from a 10,000 messages limit which then clears, to a FIFO rolling cache.   Our reason is this;  Our 24/7 command center watches enVision for alerts/changes/et...
    RSA Admin
    last modified by RSA Admin
  • **BUG ** Reports adhoc tree menu failed to load

    HI, I have attach the image of the situation we are dealing.     Symptons: 1. We COULDN'T connect to enVision ES 2560 via web interface, remote desktop or directly in the envision (no video), we have to ...
    RSA Admin
    last modified by RSA Admin
  • Open Query in CSV

    I was having a problem saving Analysis>Query findings in to a CSV file format. Envision would try to open the file but it would not open. I found that you need to hold the "Ctrl" button before you try to hit "Save ...
    RSA Admin
    last modified by RSA Admin
  • Default Message in XML

    As I understand the flow of a log message in a device XML, the message must first match a header then the messageid must match id1.  Upon the first match to a MESSAGE, the log message is parsed and the flow throu...
    RSA Admin
    last modified by RSA Admin
  • Customize the Subject line in an SMTP Output Action or Template

    enVision 3.5.2   Is there any way to customize the subject line in an SMTP output action or template?   Instead of using one of the three pre-canned options of Short, Medium, or Long, none of which al...
    RSA Admin
    last modified by RSA Admin
  • collection directory

    what is the directory path for the events that come to envision for both the 5 minues collecting by the collector service and IPDB database that are indexed by the packager service
    RSA Admin
    last modified by RSA Admin