This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject

NetWitness Community

  • Home
  • Products
    • NetWitness Platform
      • Advisories
      • Documentation
        • Platform Documentation
        • Known Issues
        • Security Fixes
        • Hardware Documentation
        • Threat Content
        • Unified Data Model
        • Videos
      • Downloads
      • Integrations
      • Knowledge Base
    • NetWitness Cloud SIEM
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Detect AI
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Investigator
    • NetWitness Orchestrator
      • Advisories
      • Documentation
      • Knowledge Base
      • Legacy NetWitness Orchestrator
        • Advisories
        • Documentation
  • Community
    • Blog
    • Discussions
    • Events
    • Idea Exchange
  • Support
    • Case Portal
      • Create New Case
      • View My Cases
      • View My Team's Cases
    • Community Support
      • Getting Started
      • News & Announcements
      • Community Support Forum
      • Community Support Articles
    • Product Life Cycle
    • Support Information
    • General Security Advisories
  • Training
    • Blog
    • Certification Program
    • Course Catalog
    • New Product Readiness
    • On-Demand Subscriptions
    • Student Resources
    • Upcoming Events
  • Technology Partners
  • Trust Center
Sign InRegister Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
NetWitness Discussions
  • NetWitness Community
  • Discussions
  • Archiver - Default collection "advanced configuration settings"
  • Options
    • Subscribe to RSS Feed
    • Mark Topic as New
    • Mark Topic as Read
    • Float this Topic for Current User
    • Bookmark
    • Subscribe
    • Mute
    • Printer Friendly Page

Archiver - Default collection "advanced configuration settings"

MarcoDemonte
MarcoDemonte Occasional Contributor
Occasional Contributor
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2017-03-15 01:22 PM

Hi to all,

 

In our archiver, we can't modify any of the settings of the "default collection" from the "Data Retention" tab in the configuration page.

It is gray and when you move your mouse over it, it states: "This collection has advanced configuration settings. Editing through this interface has been disabled."

 

default collection error 2.JPG

 

We didn't apply any "advance configuration" on it and, actually, it is a big issue not to be able to modify the retention. 

Has anyone experienced a strange behaviour like this? If yes, could you share the solution/workaround you applied?

Thank you for your time (and sorry for my English)

 

Best regards

Marco

  • Archiver
  • Community Thread
  • Discussion
  • Forum Thread
  • NetWitness
  • NW
  • NWP
  • retention
  • RSA NetWitness
  • RSA NetWitness Platform
0 Likes
Share
Reply
  • All forum topics
  • Previous Topic
  • Next Topic
2 REPLIES 2

GiuseppeCunsolo
GiuseppeCunsolo Beginner
Beginner
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2017-03-16 05:39 AM

Hi Marco,

 

Open the Archiver View > Explore and have a look under archiver > collections > database > config if any of the $.dir value is showing something different from 0 B.

 

Archiver - Database.png

 

When this is set to something different from 0 the UI will show the collection greyed out to avoid overwriting these values.

 

Here is something for your reference about these settings:
https://community.rsa.com/docs/DOC-63995

https://community.rsa.com/docs/DOC-41417

 

Unless you are experienced with these settings I would advise to check with tech support.

 

HTH

 

G.

2 Likes
Share
Reply

MarcoDemonte
MarcoDemonte Occasional Contributor
Occasional Contributor
In response to GiuseppeCunsolo
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

‎2017-03-16 01:35 PM

Thank you Giuseppe!

Yes, you are right. Actually there is not "=0 B" after any of the mount points configured for metadb, sessiondb, packetdb and index.

Since we have a case open for this issue and we had a collection index file corrupted few days ago with the DB offline for many hours, I will ask it to the tech support.

In the mean time, thank you!

 

Regards

Marco

0 Likes
Share
Reply
Powered by Khoros
  • Blog
  • Events
  • Discussions
  • Idea Exchange
  • Knowledge Base
  • Case Portal
  • Community Support
  • Product Life Cycle
  • Support Information
  • About the Community
  • Terms & Conditions
  • Privacy Statement
  • Acceptable Use Policy
  • Employee Login
© 2022 RSA Security LLC or its affiliates. All rights reserved.