- Event Stream Analysis Overview
- Configure ESA Correlation Rules
- Additional ESA Correlation Rules Procedures
- Update Your ESA Rules for the Required Multi-Value and Single-Value Meta Keys
- Configure Advanced Settings for ESA Correlation
- Configure Character Case for Advanced ESA Rules
- Deploy Endpoint Risk Scoring Rules on ESA
- Change Memory Threshold for Trial Rules
- Start, Stop, or Restart ESA Service
- View Audit Logs and Verify ESA Component Versions
- Configure ESA Analytics
- References
ESA Configuration Guide for RSA NetWitness Platform 11.x - Table of Contents
Document created by RSA Information Design and Development 
on Sep 13, 2017Last modified by RSA Product Team on Jan 30, 2020
Version 19Show Document on Sep 13, 2017Last modified by RSA Product Team on Jan 30, 2020