top links
top shadow		  
lft_mid
Google logorgt_mid
homeswitchstoreEARTHLINK TOOLSMEMBER CENTERtab_rgt
DIAL UPHIGH SPEEDwirelessbusinessextras

JH-Analyst | Symantec Connect Community
Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

JH-Analyst

Member Profile

JH-Analyst

Contact: Send this user an email
Job Title: Data Security Professional
Member for: 32 weeks 5 days
Blog: View recent blog entries
Contribution Stats
0
Solutions
1
Forum Thread
3
Comments
0
Blog Entries
2
Ideas
0
Articles
0
Videos
0
Downloads
0
Events
0
Groups Joined

JH-Analyst's Activity

Show:
discussion comment 13 Feb 2012
JH-Analyst commented on: How to set Event Date field for newer than 1 month?
No, we are already using Original Event Date. If we were using Logged date, how would it be a week old? The question here is NOT what field to use, the question is if there is syntax supported in the SSIM to support my original post, dynamically ...
discussion comment 08 Feb 2012
JH-Analyst commented on: How to set Event Date field for newer than 1 month?
As for span, that doesn't block old events from correlating if it is an single incident, such as a Malware event sent from a remote user that had their device powered off for a week. Once they login, that week old event will pop up and we ...
idea comment 08 Feb 2012
JH-Analyst commented on: Add ability to view health of Collection Hosts and/or Agents in Statistics
Unfortunately we are using 4.64 and do not have those rules at our disposal, nor do we have the X NOT followed by Y template. Perhaps when an upgrade is undertaken, but until then we are without a method.
New forum discussion 08 Feb 2012
JH-Analyst posted: How to set Event Date field for newer than 1 month?
SSIM version 4.64 When creating rules or filters, you can add the field of "Event Date" and set it to > 02/01/2012 12:00 AM This will give you all events that are newer than February 1st. What I am looking for is something will dynamically change each day, such as an event tha
New idea 05 Oct 2011
JH-Analyst posted: Add ability to view health of Collection Hosts and/or Agents in Statistics
If a collection device stop reporting there is no immediate method of notification unless you constantly monitor the Average input rate of events and notice that it has dropped. I did not see any ability to query the status of collection/agent devices to determine if all of the assets are reportin
New idea 05 Oct 2011
JH-Analyst posted: Create functionality to view Correlation Rule that created Specified Incident
I think it would be very beneficial to incorporat ability to open an incident and be able to view the associated Correlation Rule that generated this Incident. It could be added in many ways: 1. An additional Tab in the preview pane that summarizes the Rule as Read-only 2. Add an Icon in t

Technical Support

Symantec.com

Store

Community Stats

Total Content Items
Members
269,414