000029051 - How to use REST to extract a PCAP for a specific query in RSA Security Analytics

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 4Show Document
  • View in full screen mode

Article Content

Article Number000029051
Applies ToRSA Product Set: RSA Security Analytics
RSA Product/Service Type: Concentrator, Broker
O/S Version: CentOS
 
ResolutionFor step-by-step instructions on exporting a PCAP file for a specific query against an RSA Security Analytics Concentrator, as well as on obtaining meta values for a particular session, refer to the attached document.

Outcomes