RSA Admin

Comparing logs from two systems

Discussion created by RSA Admin Employee on Sep 15, 2010
Latest reply on Oct 13, 2010 by RSA Admin

Is it possible to compare logs from two different systems? 

 

Specifically looking to compare RSA DLP log events and Cisco Ironport ESA logs.  I would like to be able look in the RSA DLP Logs for an incident, then looking for the same To, From, and Subject to find the message ID of that message in Ironport.  Then to check whether that Message was sent with TLS or not.

Outcomes