ArcSight User Discussions

Arcsight Intelligence about Violation can't View events ( Explore Raw Events) ：No events were found to match your search ？

aaron_hsia 8 months ago

Dear ALL

My Arcsight Platform Version CE24.1

Arcsight Intelligence "Anomalies & Violations" about

threat: Workflow Violation or family: Violations or ds: Violation ，I can't view any Raw events

Tags:

Arcsight platform

Intelligence

0 Talambuta Ion 6 months ago

Try another browser or look at parameters in ITOM Portal / Intelligence. At the bottom of the page you have 2 param.: Enable Search Manager and Event Sorting. Look at this if they are enabled. Also, check the time when alerts was created. If date is out of the Intelligence retention period, I think it's also a solution to your question. Alos, you can test with 3th param. "Events for Legacy Travel Related Anomalies" - enable it and after the pods are up and running, look at the search manager.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Resources

Learning Services

Partner Programs

Privacy

Compliance

Help

Company

Privacy Policy
Terms of Use
Cookies Preferences

Accessibility
Anti-Slavery Statement

Support
Contact Us

Careers
Code of Business Conduct and Ethics

The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.