NSR 826-3 for Security Analytics

Products

• Security Analytics

Issue/Introduction

The following patch is meant for Security Analytics 8.2.6.  

Environment

Security Analytics 8.2.6 
NSR 3

Resolution

# SADEV-4731 - Fix FireEye script grep for verdict (#1384)
# SADEV-4660 - Reduce timeout from 10 to 3 seconds. (#1367)
# SADEV-4660 - Create a timeout for waiting for Tonic responses. (#1341) (#1365)
# SADEV-4688 - When reading an SFLT from disk, pull in one entire DB rather than keep the zipped file locked. (#1349) (#1352)
# SADEV-4659 - Clear mask before setting desired signals. (#1337) (#1340)
# SADEV-4646 - Do not update space table journal entries when writing out a slot if the only reason the slot is in memory is for the purpose of linking to the slot chain. (#1320) (#1338)
# SADEV-4631 - Tonic-Too-many-open-files-error (#1307) (#1333)
#
# This NSR is intended for Security Analytics (SA) 8.2.6-55530.
#
# Testing
#
# This NSR has been minimally qualified by the SA QA team - testing before and
# after patch installation is recommended.
#
# Instructions for Installation
#
# 1. Remove any existing NSR from the system (instructions below, original NSR script required)
#
# 2. Ensure /home/nsr directory exists, run:
#       mkdir -p /home/nsr
#
# 3. Put this file (nsr826-3-55530.55538.sh) on appliance in directory /home/nsr
#
# 4. On appliance, run:
#       cd /home/nsr
#       bash ./nsr826-3-55530.55538.sh
#
# 5. It is recommended that testing be performed before and after patch
#    installation to confirm expected behavior as described above.
#
# 6. Leave the script (nsr826-3-55530.55538.sh) and backup file (nsr826-3-55530.55538.backup.tgz) in the /home/nsr directory.
#
# Instructions for Removal
#
# 1. Remove nsr:
#       cd /home/nsr
#       bash ./nsr826-3-55530.55538.sh -r
#
# 2. It is recommended that testing be performed before and after patch
#    removal to confirm expected behavior as described above.
#
# General Availability
#
# These issues will be fixed in the 8.2.7 release.