RSA Admin

Need to Create a Rule for device not sending logs for more than 1 hour in RSA Envision

Discussion created by RSA Admin Employee on May 4, 2013
Latest reply on May 5, 2013 by RSA Admin

Hi All,

Can anyone help me to write a correlation rule for the device not sending logs for more than 1 hour. I already have rule for device not sending logs for more than 4 hours, but the client requirement is that he wants the alert for the devices not sending logs for more than 1 hour.

 

Any help would be greatful.

 

Regards,

Samad M

Outcomes