I'm collecting logs from a CELERRA CIFS Server. The logs are collected successfully like a Windows Event NIC agentless device type but the XML parser don't undestand the logs and I can't report on them.
RSA Support said their developers website is down for two weeks and they can't answer me...
By looking at the raw events the only one difference is this:
Original Windows Event Nic events begins like %NICWIN-4-Security_560_Security
Celerra events begins like %CELERRA-4-Security_560_Security
The rest of the event is exactly the same.
Do you have any idea on how to solve this?
I tried to add a few lines in wineventnic_msg.xml replacing NICWIN with CELERRA but it didn't work.