Hello,
We have an incident rule to check the logins across multiple servers but we need to remove a specific user or specif login, an Exchange Health Mailbox. Does anyone now how i can remove his appearance?
This is how we have the rule:
But it still give us the logins from HealthMailbox.
Many Thanks
Renato Goncalves,
I've moved your question to the RSA NetWitness Platform space so you can get an answer from one of our support engineers or customers who have faced a smilar issue.
In the future please be sure to post your RSA NetWitness Platform-specific questions to this forum.
Regards,
Erica