|Applies To||RSA Product Set: Security Analytics|
RSA Product/Service Type: Security Analytics UI, Security Analytics Server, Event Stream Analysis (ESA), Incident Management
RSA Version/Condition: 10.4.x, 10.5.x, 10.6.x
O/S Version: EL6
|Issue||By default in the Security Analytics UI, if you go to Incidents -> Configure you won't see any records.|
This is because the Incident Management (IM) database has not yet been configured.
Also, while the IM Service resides on the Security Analytics Server, the IM Database resides on the ESA Server.
Therefore, the Incident Management module requires an ESA appliance to properly function.
|Resolution||To Configure IM follow steps below|
If you are unsure of any of the steps above or experience any issues, contact RSA Support and quote this article number for further assistance.