Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Almost identical rules - one fires, one doesn't?

$
0
0

Check the time difference between your appliance and your agent - take a look at the DetectionTime and InsertionTime columns of all the events in your screenshot. Make sure the appliance's time is accurate and not too far off of both current time and the agent's time.


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>