This issue occurs when a complex condition is created, and one of the sub conditions is deleted. In the case below, the correlation rule is missing a sub condition that would have been used together with the Rule Message condition, but it has been deleted. The following screenshot shows a similar situation.
The workaround of this issue is to delete the "indented" broken complex condition, and adding it back to the rule as a regular condition.
This article describes how to re-generate the licenses for
crashed/re-image FireSIGHT Management Center Virtual Appliance. If
Virtual FireSIGHT manager crashed and which has to be re-deploy using
Vmware OVF file. At this situation, license key will be cha...
This article describes the basic steps and best practices for creating
and configuring an RNA policy in 4.10. Before you can begin to generate
RNA events, or gather RNA data, you need to make sure you have done the
following: 1) The sensor must be managed...