When you upgrade your Enterprise Security Manager to 9.4.2 or later, it is now a requirement to perform a manual rule update. This ensures that parsers and collectors are up to date and working after the update.
Steps to perform a manual rule update are in KB83046:
For more resources, visit the McAfee Knowledge Base [support.mcafee.com] and search for SIEM-related KBs and visit the McAfee SIEM Community at: https://community.mcafee.com/community/business/siem
To help you maximize your SIEM deployment, McAfee SNS ProTips deliver troubleshooting, best practices and how-to tips with links to in-depth Knowledge Base resources. To unsubscribe from ProTips or change your SNS settings, visit the SNS Subscription Center at: https://sns.snssecure.mcafee.com/content/signup_login