DVorel

Profile

DVorel

Partner

Member for: 3 years 10 weeks
Contact: Send this user an email

Member for: 3 years 10 weeks

Blog: View recent blog entries

Contribution Stats

Solutions

Forum Threads

Comments

Blog Entries

Ideas

Articles

Videos

Downloads

Events

Group Joined

DVorel's Activity

Show:

discussion comment 30 Jul 2010

DVorel commented on: Security Information Manager (SSIM) - Oracle poll interval too short

You can use "Execution Time" for all DB sensors. We use it for collecting events each hour...

discussion comment 30 Jul 2010

DVorel commented on: SSIM 4.7 - Creating Rules - Symantec Event Code

Hi Aveiga, Symantec doesn't provide list of Symantec Event Codes o/ The only way how you can obtain list of Symantec Codes is to create own query based on unique Symantec Event Codes over last N days/months and then you will have list ...

New forum discussion 31 Mar 2010

DVorel posted: Correlation rule question - multiple persistent logins

I need a solution Hi, we need to monitor multiple persistent user logins from different computers to the AD. Is there way how correlate it in SSIM ? It seems to me, that there is no way how correlate it (there is no many to m

discussion comment 11 Feb 2010

DVorel commented on: Auto-updating the user look up tables

Hi Novadean, Works this method without any problem for you ? Are you able correlate based on updated lookup table ? I have no succes with manual modification (as you can read in the previous thread), because after update, the lookup table was ...

discussion comment 11 Feb 2010

DVorel commented on: Saving reports as csv

Hi Slava00, you can use simsar tool. Example: java -jar /opt/Symantec/simserver/lib/simsar.jar -a /eventarchive/ssim-datastore/2010/01/ -q 'product_id = 8009' -C /etc/ssim/definition/oracle-test.txt -c -S "|" > ...

discussion comment 25 Nov 2009

DVorel commented on: Distribute Configuration

Hi Belen, we have same behaviour with 4.6 agent on RHEL/Debian boxes. As support said, it's known issue and etrack is opened for this. I hope they will have fix for this soon (as other fixes for many other bugs which exist in ...

discussion comment 19 Nov 2009

DVorel commented on: Auto-update of Custom User Lookup Table

None of you do not use dynamic lookup tables (in some way, CLI / LDAP) ?

discussion comment 13 Oct 2009

DVorel commented on: Auto-update of Custom User Lookup Table

Hi Intasunta Login seems work fine and LDAP content is modified as well. If I modify (add or delete) data in lookup table directly via LDAP (cisProperty), in GUI is this table completelly empty, even structure of lookup table ...

New forum discussion 12 Oct 2009

DVorel posted: MSSQL audit

I need a solution Do you using SSIM for auditing MSSQL database ? Please share your experiences. SSIM does not know collect this kind of logs (but as L3 support said, they are working on this collector), but maybe somebody of

discussion comment 12 Oct 2009

DVorel commented on: Auto-update of Custom User Lookup Table

Hi, please, do you have working solution for this ? I tried to modify lookup table in LDAP directly, but SSIM "locked" this modified table and thus table is not usable at all. Thank you

DVorel

DVorel's Activity

Technical Support

Symantec.com

Store

Community Stats