000032752 - Forwarding rule name is not updated when the advanced rule name changes in RSA Security Analytics

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000032752
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: Event Stream Analysis (ESA)
Version/Condition: 10.5.2
IssueFor a cross-site deployment, when you change the name of an advanced rule, the forwarding rule does not change along with the name change for the advanced rule.
This can result in an orphaned rule which can continue to forward events.
ResolutionThis issue is being investigated by the Engineering team in order to provide a permanent resolution in a future release.
WorkaroundTo rename a cross-site advance rule, create a new rule and delete the old one.