1 Reply Latest reply on Feb 3, 2014 1:44 PM by rth67

    Rules update

    msimard

      Is there a place where you can see what has been update by the automatic rule update when it's setup.

       

      It's one thing to be told that the rule have benn updated, but if you don't know what has been updated.... It could be in a form of sns notification a bit like FASL rule update.

        • 1. Re: Rules update
          rth67

          I know this is not exactly what you are looking for, but one way you could check to see what was New or Updated would be to go in to the Policy Editor, go to Advanced, on the Rule Status drop down select "new/updated" then on the "Time" selection, select a time range, last day, week, whatever - refresh.

          Then navigate through the Receiver's Advanced Syslog Parser, Data Source, Windows Events, etc...

          This will show you what is new or updated, but will not show you what exactly changed.

          1 of 1 people found this helpful