RSA Admin

Windows event/device classification

Discussion created by RSA Admin Employee on Jan 17, 2011
Latest reply on Jan 20, 2011 by RSA Admin

I have a Windows Server 2008 sending logs to Envision. It was detected as unknown and I wish to manually set its device type but cannot determine whether to select "Windows Events (BL)", "Windows Events (ER)" or something else

 

Can someone shed some light on what the differences are between them?

 

Thanks

Outcomes