AnsweredAssumed Answered

Rule for alert "New device started sending logs to RSA SA"

Question asked by Shahnawaz Kohati on Apr 30, 2018
Latest reply on Apr 30, 2018 by John Kisner

Need to create an alert under RSA SA if new event source started sending logs to RSA when integrated with RSA for the first time.

 

Need help on the same.

 

RSA SA : 10.6.2

 

Let me know: Do we have any similar alert available in LIVE?

Outcomes