Article Content
Article Number | 000031348 |
Applies To | RSA Product Set: enVision RSA Product/Service Type: enVision Core RSA Version/Condition: 4.1 SP1 Platform: Windows O/S Version: 2008R2/2003 Product Description: RSA enVision ES/LS |
Issue |
|
Cause |
|
Resolution | Re-create a new .POS "position" file:
Path: E:\nic\csd\config\iwndows\lonely\pos
Path: \\NAS IP\\vol0\nic\csd\config\windows\LC1\pos 3. Based on your "RSA enVision" setup [ES or LS], delete the "POS" file from the above mentioned paths. 4. Restart NIC Service Manager & NIC Windows Service on your ES appliance or on your "LC" collector in case of an LS multi-appliance environment. 5. Go to the path where the POS is stored and notice that a new POS has been created. 6. On your GUI, Go to Analysis tab > event viewer > message view and you will be able to see real-time logs indicating that NIC Windows service has started back pulling events from your MS Windows Server(s). |