RSA Admin

Envision to correctly display windows events

Discussion created by RSA Admin Employee on May 5, 2011

I am having difficulties getting envision to correctly display some windows events, in particular Security_566 events.  Envision grabs the log files but does not translate some fields correctly.  So what I end up with is hex instead of the correct text in a report, which is useless to report on.  i have attached a screen shot of the RSA envision query and also the actual text that is displayed in the windows event viewer.


I believe this to be an issue with the way that the windows event collection occurs.