000026303 - Which hotfixes are available for RSA Security Analytics 10.3 SP3?

Document created by RSA Customer Support Employee on Jun 14, 2016•Last modified by RSA Customer Support on Sep 3, 2019
Version 5Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000026303
Applies ToRSA Security Analytics
RSA Security Analytics 10.3.3
RSA Security Analytics Decoder
RSA Security Analytics Log Decoder
RSA Security Analytics Concentrator
RSA Security Analytics Broker
RSA Security Analytics Server
RSA Security Analytics Event Stream Analysis
RSA Security Analytics Warehouse
RSA Security Analytics Archiver
IssueWhich hotfixes are available for RSA Security Analytics 10.3 SP3?
How do I obtain the hot fixes for Security Analytics 10.3.3?
Resolution

If any of the following issues are experienced after upgrading to RSA Security Analytics 10.3 SP3, contact RSA Support and quote this article ID for further assistance and to obtain the necessary hotfix(es).



  1. Broker is unable to export PCAP or logs.  Refer to the knowledgebase article Broker unable to export PCAP or logs after upgrade to RSA Security Analytics 10.3 SP3 for additional information.
  2. Creating ESA modules with dependencies fails upon ESA restart.
  3. ESA stores device passwords incorrectly when the password contains a special character.
  4. ESA constantly loses its license.
  5. Investigations in Security Analytics return inconsistent results.
  6. Log decoder time parsing errors are found in the logs.
  7. Legacy Windows Collector configuration screen is not showing event sources.
  8. 400 Bad Request error is seen when navigating from the Dashboard to Investigation.  Refer to the knowledgebase article Dashlet 400 Bad Request Error - RSA Security Analytics for additional information.
  9. Investigation of last 24 hours is actually returning more results than expected.
  10. Corrupt Avro files are being stored on the RSA Security Analytics Warehouse (SAW) by the warehouse connector.  Refer to the knowledgebase article Corrupt Avro files are being stored on the RSA Security Analytics Warehouse (SAW) by the warehouse connector for additional information.

Also reference knowledge based article a67710 for information regarding the term and usage of a hotfix.

Legacy Article IDa66866

Attachments

    Outcomes