I am unable to run rule or report on Archiver and also all meta are not available when I am using Archiver as a data source. Do anyone have solution for this?
Did you look at the reporting engine log and the archiver log?
Reporting engine log can be found at: /home/rsasoc/rsa/soc/reporting-engine/logs/reporting-engine.log
Archiver log can be found at: /var/log/messages
You can modify the meta groups following this documentation listed on sadocs:
Thank you for the support, through this link I resolved the issue.
Retrieving data ...