000037677 - ESA email notifications are failing to send when an invalid subject template is selected

Document created by RSA Customer Support Employee on Jul 13, 2019
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000037677
Applies ToRSA Product Set: NetWitness Logs & Network
RSA Product/Service Type: Event Stream Analysis
RSA Version/Condition: 11.x
IssueESA is failing to send email notifications.  In the correlation-server.log you will see:

FTL stack trace ("~" means nesting-related):
    - Failed at: #if highAlarmsCount > 0  [in template "inline" at line 1, column 23]

CauseThe Event Source Monitoring default email subject template is not supported with ESA alerts.  highAlarmsCount is not defined within ESA.

Admin > System > Global Notifications > Output tab click + or select an existing email output to add or modify an email notification template:
Event Source Monitoring defult email subject Selected in list of Output for the email notification template
ResolutionWhen selecting the Subject* line for the output of an ESA email notification select Custom.

custom selected in Subject list of Output email notification configuration