Reporting Engine does not forward the output email with a large PDFs in RSA Security Analytics

Issue

It is noticed that Reporting Engine does not send some of the generated reports when attaching PDF option is selected.
The issue only occurs on some reports.

Cause

The Reporting Engine is designed to attach PDF files up to 20MB. If the generated reports is over 20MB in PDF format, the email will be not sent.

Resolution

In order to resolve the issue, uncheck the 'PDF' option and select only the 'CSV' option under the 'Output Actions'.
Alternatively, modify the Schedule Report to generate a smaller report(e.g. Reduce the time range for the report).

Product Details

RSA Product Set: NetWitness Logs & Packets, Security Analytics
RSA Product/Service Type: Reporting Engine
RSA Version/Condition: 10.6.2, 10.6.3
Platform: CentOS
O/S Version: 6

Approval Reviewer Queue

RSA NetWitness Suite Approval Queue