Looking over the formatting of the pages the side panels appear to be
way to large compared to the center panel that contains the information
you are trying to focus on. The side panels should be of a smaller size
by comparison as it draws your atten...
On 10.6.x Log Collectors, the SELinux environment prevents the SCP
protocol from working with the default configuration. The following
steps allow the SCP protocol to function. Log Collector versions 10.6.2
and LaterThe Log Collector configures SELin...
If you find that you are looking for support on your NetWitness
purchased VNX it is important to remember to contact NetWitness Support
to assist. Currently any customer who has purchased a VNX with their
NetWitness purchase must go through NetWitnes...
@MohammadEnnab Are you attempting to alert or to perform a report on the
top public talkers to your environment? If you are just doing an
Investigation then you can use ip.src (IP Source) as the meta key for
seeing who all is talking to you. Then you...
@Arasnick Sounds good. Based on what I'm seeing I suspect it is going to
need a little more hands on assistance from Support to take care of this
issue.
@Arasnick hope you are doing well Looking over the respond log I
think it may not be correctly configured. I see a lot of warnings and
errors. Have you reviewed the Respond Server Configuration guide:
https://community.netwitness.com/t5/netwitness-...
@Arasnick The ESA is what you need to make sure is up and running and
that the Respond server is correctly connecting to it so it can use the
mongo database on that server. Can you provide the Respond Server log
/var/log/netwitness/respond-server?
@Bhavani_Kari do you have an Event Stream Analysis (ESA) server within
your environment? The respond server uses the mongo database that is on
the ESA server. If you do have one, please double check the Respond
configuration that it is pointing to th...
