Hello,
I am having a strange problem and cannot rollout policy after creating a custom ASP rule for one of my data sources. I get an error: (Could not update policy - "Error: Could not execute command on device") I disabled the rule since that was the obvious thing to do, but still no rollout. I deleted the rule, and again the same thing. After that I tried to remove the problematic data source altogether, but still could not rollout the policy. Stopped/started the receiver, even restarted the whole SIEM still the same problem. Last thing I tried was manual rule update to possibly fix some corrupted rules, and the problem still persists.
Anyone had something similar happen and maybe can share some tips? Because I hit a dead end obviously...
Kind Regards,
Blagoja