RSA Admin

Problems with custom event source alerting???

Discussion created by RSA Admin Employee on Jul 30, 2012
Latest reply on Sep 18, 2012 by RSA Admin
Hi, I'm having some weird errors with correlated views and a custom event source. It should be very straightforward. I can see the messages I want in 'Manage messages to parse' yet when I use a view to refer to a correlated alert matching the message I want, the view fails with a 'no devices configured' error message. If I add another statement to my existing correlated alert for the custom event source, using an RSA-defined event source, it saves without error. A very similar alert using an RSA-defined event source works fine. Just wondering if anyone has had similar problems in the past with custom event sources and alerting? Thanks, Mark.