000029683 - Solaris logs are not parsed correctly in RSA Security Analytics when values are surrounded by angle brackets

Document created by RSA Customer Support Employee on Jun 15, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000029683
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: Security Analytics UI, Log Decoder
RSA Version/Condition: 10.4.0.2 and below
Platform: CentOS
O/S Version: EL6
IssueWhen Solaris mail logs are consumed by a Log Decoder then subsequently parsed using the Solaris parser, values encased in angle brackets (i.e. from=<person@example.com>) will be stripped from the generated meta, as shown in the screenshots below.
User-added image
User-added image
ResolutionThis issue has been permanently resolved in RSA Security Analytics 10.4.1.

Attachments

    Outcomes