|Applies To||RSA Product Set: enVision|
RSA Product/Service Type: enVision Core
RSA Version/Condition: 4.1 SP1
O/S Version: 2008R2/2003
Product Description: RSA enVision ES/LS
|Resolution||Re-create a new .POS "position" file:|
Path: \\NAS IP\\vol0\nic\csd\config\windows\LC1\pos
3. Based on your "RSA enVision" setup [ES or LS], delete the "POS" file from the above mentioned paths.
4. Restart NIC Service Manager & NIC Windows Service on your ES appliance or on your "LC" collector in case of an LS multi-appliance environment.
5. Go to the path where the POS is stored and notice that a new POS has been created.
6. On your GUI, Go to Analysis tab > event viewer > message view and you will be able to see real-time logs indicating that NIC Windows service has started back pulling events from your MS Windows Server(s).