Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

Cisco Employee

Estreamer generates error messages for "Failed to deserialize RUA Event"

Estreamer service on 3D System generates the following error messages for user activity data:

EventStreamer child(qradar.as.local):ConnectionHandler [ERROR] Failed to deserialize RUA Event 1004:1

  • Firepower / FireSIGHT System
Everyone's tags (2)
1 REPLY
Cisco Employee

This is a known issue. This

This is a known issue. This issue is fixed on software version 5.2.0.3. Upgrading your 3D System to latest software version will fix this issue.

 

Note:  Once the 5.2.0.3 patch is installed, you may still receive the RUA Deserialize error if the Defense Center contains older unified files prior to the 5.2.0.3 patch.  Contact Technical Support for assistance in removing the older unified files.

53
Views
0
Helpful
1
Replies
This widget could not be displayed.