This topic sends you to the RSA Content and Resources documentation in which you will find the instructions for retrieving Log Collection content.
LIVE is Security Analytics's Content Management System from which you download the latest content. The two resource types you use to download Log Collection content are:
- RSA Log Collector - content enabling the collection of event source types.
- RSA Log Device - the latest supported event source parsers. See Adding or Updating Supported Event Source Log Parsers in the RSA Content and Resources Guide.
Identity Feed Prerequisites
In order to create an identity feed, you need to have:
- A Log Collector service with Windows Collection configured and enabled
- Created and configured an identity feed in LIVE. See Create an Identity Feed in the Live Resource Management Guide for instructions on how to create an identity feed in the LIVE Content Management System.