Alerting Issue in UI in RSA Web Threat Detection 5.1.0.7 Custom Key
Originally Published: 2016-09-08
Article Number
Applies To
RSA Product/Service Type: Mitigator
RSA Version/Condition: 5.1, 5.2,6.0
Issue
When setting up a custom key and using that key as the Alert Key in a rule, the system does not flag the alert in the UI. We have tested alerting to email, and the email arrives (telling us that the alert triggered), but there is still no alert visible in the UI. Thus, this appears to be a UI-only issue, where alerts triggered against custom keys do not appear.
As stated above, this rule sends out emails when it alerts, proving that it indeed triggers as expected, but the alert never shows in the UI.
Resolution
"Alerts listing and the Current Real Time Alerts list will only show alerts keyed against "ip, page, and user". By default there are 8 total keys to select from in the rule creation page under the "Alert Key" drop down list."
This is now fixed in version WTD 6.1 that is scheduled to be released in October 2016.
What was fixed --
"Remove filtering on javascript code that filters all keys except for ip, user and page.
All keys are now supported."
Tested the fix --
"creating a RT rule and setting alert keys as : user_ip & user_page & ip_page & agent
when rule is triggered, all keys displayed in the alerts section"
Related Articles
Comments from a reassigned review Item are not displaying in email in RSA Via Lifecycle and Governance 30Number of Views "Invalid column index" error in RSA Identity Governance and Lifecycle review "Total Entitlements not in Review" 41Number of Views RSA Identity Governance and Lifecycle Workflow Activity Node of type Decision Node based on internal variables always eval… 103Number of Views Authentication failing with F5 Big Iron F5 Load Balancer version 11.5 or 11.6 with no entries in the Authentication Manage… 571Number of Views Unable to create managed connection LDAP error in system activity report for RSA Authentication Manager 8.x 684Number of Views
Trending Articles
Downloading RSA Authentication Manager license files or RSA Software token seed records RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide Troubleshooting RSA MFA Agent for Microsoft Windows RSA Release Notes for RSA Authentication Manager 8.8 RSA Release Notes: Cloud Access Service and RSA Authenticators
Don't see what you're looking for?