Urgent! Missed events from windows nic.

[AlexeyK]

Hi,

After unsuccessfull changing password, now all works fine, but RSA Envision didn't gather events for weekend days.

It is possible to gather all logs for all servers for exactly period.

Maybe i can do it from CLI or some other way?

Please share your experience.

Thanks.

[AlejandroNegron]

Hi aleksey,

I'm not sure to understand the problem, after you corrected the problem, enVision should've pickup the collection exactly where it left off the last time, unless the events got overwritten on the Windows devices.

Do you see in the Windows Event Viewer events that are not in enVision?

[AlexeyK]

Hi Alejing,

Thank you very much for your answer,

Yes it was as you describe, i connected with RSA support and we solved this issue.

But i want to make small notice: it was gathered on monday and all events for friday, saturday and sunday saved on monday. I mean if you want to get events from this period (i missed friday, saturday and sunday) it should find it on monday.

[AlejandroNegron]

Thanks for your reply Aleksey

alejng