|Applies To||RSA Product Set: Security Analytics|
RSA Product/Service Type: Security Analytics UI, Archiver, Workbench
RSA Version/Condition: 10.5.0.0
O/S Version: EL6
|Issue||Attempting to export logs for a Workbench collection from the Event Reconstruction window fails with the error message below.|
Error retrieving logs from service: TransportException: Message packets was not recognized by /sdk
The error message is seen in the Profile -> Jobs view in the Security Analytics UI, as shown below.
|Resolution||This issue will be permanently resolved in the Security Analytics 10.5.0.1 release.|
|Workaround||In order to export logs from a Workbench collection in Security Analytics 10.5.0.0, export the logs from the Events page rather than opening the Event Reconstruction window.|
Follow the steps below to export logs from the Events page.