Highlighted
Absent Member.
Absent Member.
252 views

symatec sep11 duplicate alert

hi

we are cnnected to sep 11 DB with arcsight collector in 4 domains,4 servers eche server with is DB .

we suffer from weird Problem -

1 .we get event on virus .

2.after a week or 8 days we get the sam event with the same parameters (differnt eventID in arcsight )

3.we canot see this event in symantec console ,or symantec DB .

4.we run arcsight query on the DB for test and still didnt see the event.

did any one bump into this problem?

Labels (1)
0 Likes
Reply
3 Replies
Highlighted
Absent Member.
Absent Member.

Having same problem. DId you find a solution to this issue.

Thank you

0 Likes
Reply
Highlighted
Absent Member.
Absent Member.

Having same issue. Anybody have a solution for this issue

0 Likes
Reply
Highlighted
Absent Member.
Absent Member.

I am experiencing the same issue as well.

- Brandon

0 Likes
Reply
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.