Resources to learn ESA advanced EPL rules
I am interested in learning about EPL and how to create the rules. However I am finding it hard to locate useful resources to help guide me in learning and understanding it. We have some here which I review allot but having a guide to explain it would help allot. I find the RSA documentation not to be very detailed in it either.
Can anyone help recommend some good sites, books or resources to better understand this area.
- alert rules
- Community Thread
- ESA Rule
- Forum Thread
- RSA NetWitness
- RSA NetWitness Platform
I have moved this thread to the https://community.rsa.com/community/products/netwitness?sr=search&searchId=f2cafbad-b8ce-4f08-805a-a05f2d820daa&searchIndex=0 community so that you can get an answer to your question.