Some custom feeds failing after 10.4.1 upgrade
Originally Published: 2015-06-17
Last Modified: 2023-09-24
Article Number
000063179
Applies To
RSA Product Set: Security Analytics
RSA Product/Service Type: SA Security Analytics Server
RSA Version/Condition: 10.4.1.0
Platform: CentOS
Platform (Other): null
O/S Version: 6
Product Name: SMC-S4H-BROUP
Product Description: S4 Bro Upgrd
Issue
Upgrading to 10.4.1 caused a few custom feeds to stop working. An error is encountered with the XML definition file. 
Cause
The upgrade places  the version="1" string within the FDF element of the feed's XML file

Entry below seen in /var/log/messages
Seen in /var/log/messages
Resolution
Edit the XML file and remove the version="1" string

User-added image

Related Articles

Trending Articles

Don't see what you're looking for?