Cisco IPS events collecting SDEE
is anybody using SDEE for collecting logs from Cisco IPS on SA?
I tried to set it up, but its not collecting any events.
From logs it seems, that communication is OK.
On enVision it works fine.
I found difference in requests between enVi & SA and its probably caused by different "subscriptionId".
Anybody some idea?
Thanks a lot.
- Community Thread
- Forum Thread
- RSA NetWitness
- RSA NetWitness Platform