- Event Stream Analysis Overview
- Configure ESA Correlation Rules
- Additional ESA Correlation Rules Procedures
- Update Your ESA Rules for the Required Multi-Value and Single-Value Meta Keys
- Configure Advanced Settings for ESA Correlation
- Configure Character Case for Advanced ESA Rules
- Deploy Endpoint Risk Scoring Rules on ESA
- Change Memory Threshold for ESA Rules
- Start, Stop, or Restart ESA Service
- View Audit Logs and Verify ESA Component Versions
- References - Previous ESA Versions
ESA Configuration Guide for RSA NetWitness Platform 11.x - Table of Contents
Document created by RSA Information Design and Development 
on Sep 13, 2017Last modified by RSA Product Team on Sep 8, 2020
Version 21Show Document on Sep 13, 2017Last modified by RSA Product Team on Sep 8, 2020