AnsweredAssumed Answered

Report from IPDB

Question asked by hubba900 on Mar 21, 2014
Latest reply on Jun 7, 2014 by huan zhou

Hello,

 

Somebody can help me retrieve events from IPDB located at RSA enVision ES? I read and do all what I find here: https://sadocs.emc.com/0_en-us/095_10.3_User_Guide/13_Device_and_Service_Configuration/IPDB_Extractor_Service_Configurat…

 

I retrieve devicelist, but can't rectrieve data (events). If I create simpe rule, for example "select ip.src, ip.dst" and "where event.cat.name like '%'" and event source - my devicelist - I receive blank report. I try written any terms in where field and all time I receive blank report.

Outcomes