Hi All,
I have made an alert and I wanted to push it to the decoder, but I keep getting the error : Alert creation failed at decoder '-RSA-HP - Decoder'. Resolve the issue and try again.
anyone can help??
Hi All,
I have made an alert and I wanted to push it to the decoder, but I keep getting the error : Alert creation failed at decoder '-RSA-HP - Decoder'. Resolve the issue and try again.
anyone can help??
Hello aldayyat,
What version of Security Analytics are you running? And do you have the decoder set as a source in the reporting engines configuration?
Jay Kisner
RSA Support
aldayyat,
If you look in the logs for the decoder and reporting engine at the time of the error it should show a little more information as to why the alert creation failed. If you could provide some of those logs I might be able to assist. You may have to attempt to push the alert again to make retrieving the logs easier. You can either use the UI to pull the logs or you can go to the appliances themselves and pull them.
In the UI just go to logs area for the decoder and reporting engine. If you want to pull them from the appliance you can get the /var/log/messages from the decoder and the /home/rsasoc/rsa/soc/reporting-engine/log/reporting-engine.log on the SA server.
Jay Kisner
RSA Support
It was a problem with the privilege as it worked when I logged in from an admin account