RSA Product/Service Type: Forensics
RSA Version/Condition: 5.x, 6.x
- No real-time rules are seen in the Admin UI
- Mitigator is not running
- Rules and Alerts are not firing
1. Go to Varz and verify if Mitigator is running.
2. Go to /var/log/messages and look for an error similar to the one below:
3. Obtain the mitigator rules from the Customer and save as a JSON file.
4. Have a JSON parser such as the one available in NotePad++ plugin.
5. Highlight the curly brackets to see if all rules have a beginning and an ending.
6. Start at the rule seen in the error message and add curly braces
at the end of a rule where no distinction is seen between rules.
Add until the first brace in the rule is highlighted. This should resolve the issue.
7. Save the file as mitigator.rules and give it back to the Customer to add back into WTD.
8. The Customer might also be able to add these directly to the mitigator.rules file by editing with the vi or nano editors.
Related Articles
Unable to log into Microsoft apps on Android devices when Microsoft Office 365 is configured with the RSA SecurID Access A… 51Number of Views Provisioning Form fails with 'An error occurred loading the fields for the form' error while running in RSA Governance & L… 77Number of Views RSA Authentication Manager 8.x Web Tier is not listening on TCP port 443 735Number of Views Promotion for Maintenance 133Number of Views AppArmor Local Privilege Escalation Vulnerability for RSA Authentication Manager (CrackArmor) 57Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device Troubleshooting AFX Connector issues in RSA Identity Governance & Lifecycle Authentication Manager Security Console and Operations Console Inaccessible After Certificate Update How to Forward RSA Authentication Manager 8.4 or Later Logs to Multiple Syslog Servers Using rsyslog RSA Authentication Manager 8.9 Patches and Hotfixes Readme