XMA Data Substitution Tokens represent space and an empty string

• Related Articles

• XMA: UDP message to syslog server omits space

  Moving the last word ?XYGATEMA? would restore the space and return the expected value XYGATEMA @0. The following is a workaround in Version 1.80 to eliminated the space after the IPALERT_PREFIX: IPALERT_PREFIX <130> ALERTSTRING XYGATEMA Would return ...

• XMA:Ways to address SQL error due to error 45 in AUDDET or AUDSESS

  Below are the Steps for ?Option 1? clean up the obsolete data records: Step: Option 1.0. Logon as an owner of XMA installation and install XMA macro at TACL Step: Option 1.1. Stop XMA Pathway by running the XMA_PWSTOP macro at TACL (or at the ...

• XMA: Can XMA movers send data off-box to a SIEM?

  Question: Can Merged Audit (XMA) movers send data to a SIEM (off-box) or is SLSENDER the only mover that can do this? Answer: With a filter configured with an ACTIONTYPE of SYSLOGQ, movers add audit events for products (e.g. XAC, XUA, Safeguard, EMS, ...

• XMA: How to modify XMA Log Adapter filters to send the same data to two different SIEMs simultaneously

  ** Please read before beginning this procedure ** 1.This procedure assumes that the Log Adapter (LAF) filters have already been installed. If they have not been installed, this procedure cannot be performed. If this is the case, please see the ...

• XMA: How to view contents of data sent to Splunk

  The following SQL Query is all the customer will need to run in order to see the contents of the data sent to Splunk. Set list_count 0; select alertedgmt, message FROM SYSLOGQ where cast(alertedgmt as date) = date 'yyyy-mm-dd' BROWSE ACCESS; detail ...