‎2012-03-29
11:13 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Problem with Apache HTTP 302
Using the Apache file reader service, is anyone else noticing errors parsing the HTTP 302 code? All other events seem fine, just the redirect.
4 Replies
‎2012-04-02
10:51 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
If you don't receive any replies from the board can you log this as a ticket with RSA Customer Support and we can look at rolling this into a future ESU if this is a defect. Nathan
‎2012-04-02
10:54 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Will do - I'm confirming now if this is an issue with our method of sending the logs to enVision or the parsing engine itself.
‎2012-04-02
03:55 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
It appears that the only issue is not status 302. The current Apache Web Server doesn't parse some Status 200's as well. Additionally, and more critically, the default "GET" message ID (00100) does not parse the User Agent, Cookie, Referrer, or Referrer Domain, all of which are included in the message. It's possible that future content updates fix this issue, but at the moment I don't believe we're that far behind. Any insight?
‎2012-04-03
08:50 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Would it be possible to share sample events with RSA exported from enVision? If so please email me @ nfurze@rsa.com and I can provide a SFTP site for upload. Nathan
