How to update an existing parser meta??
We have integrated an O365 device in our SA. We are receiving the logs for the same. But for few the logs are not getting parsed and so the metas are not fully created. how to update an existing parser meta??
Someone please help me out. I have tried the same by deploying the new cef from the live resource also deployed the O365 package for the same from the live resource still I am facing the same issue.
- Community Thread
- edit pars
- Forum Thread
- log parser creation
- RSA NetWitness
- RSA NetWitness Platform