DCS events sometime have a missing rule name

Products

• ICDx

Issue/Introduction

Within Integrated Cyber Defense Exchange (ICDx), events collected from Data Center Security (DCS) sometime have a missing rule name.

None.

Environment

+ ICDx v.1.3.0-4

+ DCS manager v. 6.8.1

 

Cause

In ICDx 1.3 and earlier, the DCS Collector does not normalize all events.

Resolution

Additional normalization has been added to DCS logs with ICDx 1.3.1. To ensure the most robust features, please upgrade to the latest available version.