ESM: Edit or Delete Event Source Groups

Document created by RSA Information Design and Development on Jul 27, 2016
Version 1Show Document
  • View in full screen mode
 

You may occasionally need to remove an event source group. For example, if you close an office, and you had a group consisting of all the event sources in that office, you can remove the group, since none of those event sources will be sending information to Security Analytics.

Similarly, you may need to change some of the conditions that are used to populate the group, or you may just want to rename the group.

Edit an Event Source Group

  1. In the Security Analytics menu, select Administration > Event Sources.
  2. In the Manage panel, select an existing Event Source Group.
  3. Click IconEditDevice.png.
    The Edit Event Group dialog is displayed.
  4. Change any of the details, or add, edit or remove conditions as necessary.
  5. Click Save.

Delete an Event Source Group

  1. In the Security Analytics menu, select Administration > Event Sources.
  2. In the Manage panel, select an existing Event Source Group.
  3. Click IconDeleteDevice.png.
    A confirmation dialog is displayed.
  4. Click Yes to delete the group.
You are here: Procedures > Manage Event Sources > Edit or Delete Event Source Groups

Attachments

    Outcomes