000035500 - Reporting Engine does not forward the output email with a large PDFs in RSA Security Analytics

Document created by RSA Customer Support Employee on Sep 30, 2017
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000035500
Applies ToRSA Product Set: NetWitness Logs & Packets, Security Analytics
RSA Product/Service Type: Reporting Engine
RSA Version/Condition: 10.6.2, 10.6.3
Platform: CentOS
O/S Version: 6
IssueIt is noticed that Reporting Engine does not send some of the generated reports when attaching PDF option is selected.
The issue only occurs on some reports.
CauseThe Reporting Engine is designed to attach PDF files up to 20MB. If the generated reports is over 20MB in PDF format, the email will be not sent.
ResolutionIn order to resolve the issue, uncheck the 'PDF' option and select only the 'CSV' option under the 'Output Actions'.
Alternatively, modify the Schedule Report to generate a smaller report(e.g. Reduce the time range for the report).