This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject

NetWitness Community

  • Home
  • Products
    • NetWitness Platform
      • Advisories
      • Documentation
        • Platform Documentation
        • Known Issues
        • Security Fixes
        • Hardware Documentation
        • Threat Content
        • Unified Data Model
        • Videos
      • Downloads
      • Integrations
      • Knowledge Base
    • NetWitness Cloud SIEM
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Detect AI
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Investigator
    • NetWitness Orchestrator
      • Advisories
      • Documentation
      • Knowledge Base
      • Legacy NetWitness Orchestrator
        • Advisories
        • Documentation
  • Community
    • Blog
    • Discussions
    • Events
    • Idea Exchange
  • Support
    • Case Portal
      • Create New Case
      • View My Cases
      • View My Team's Cases
    • Community Support
      • Getting Started
      • News & Announcements
      • Community Support Forum
      • Community Support Articles
    • Product Life Cycle
    • Support Information
    • General Security Advisories
  • Training
    • Blog
    • Certification Program
    • Course Catalog
      • Netwitness XDR
      • EC-Council Training
    • New Product Readiness
    • On-Demand Subscriptions
    • Student Resources
    • Upcoming Events
    • Role-Based Training
  • Technology Partners
  • Trust Center
Sign InRegister Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
NetWitness Community Blog
Subscribe to the official NetWitness Community blog for information about new product features, industry insights, best practices, and more.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
  • NetWitness Community
  • Blog
  • Services on NW 11.x Admin Server

Services on NW 11.x Admin Server

TwinkleLath
Occasional Contributor TwinkleLath Occasional Contributor
Occasional Contributor
Options
  • Subscribe to RSS Feed
  • Mark as New
  • Mark as Read
  • Bookmark
  • Subscribe
  • Printer Friendly Page
  • Report Inappropriate Content
‎2018-01-18 05:01 AM
ServiceCommand Log File LocationPurpose
Admin Serverservice rsa-nw-admin-server restart/var/log/netwitness/admin-server/admin-server.logThe NetWitness Suite Administration Server (Admin server) is the back-end service for administrative tasks in the NW UI. It abstracts authentication, global preferences management, and authorization support for the UI. The Admin server requires the Config server and the Security server to be online to perform its role.
Brokerservice nwbroker restart /var/log/messagesThe broker service is same as in 10.x
Config Serverservice rsa-nw-config-server restart/var/log/netwitness/config-server/config-server.logThe Config server stores and manages configuration sets. A configuration set is any logical configuration group that is managed independently. The Config server facilitates the sharing of properties among services, provides configuration backup and restore facilities, and tracks changes to properties.
Investigate Serverservice rsa-nw-investigate-server restart/var/log/netwitness/investigate-server/investigate-server.logIt is responsible for investigation.
Orchestration Serverservice rsa-nw-orchestration-server restart/var/log/netwitness/orchestration-server/orchestration-server.logInternal, system management service that runs on the NW Server to provision, install, and configure all services in your NetWitness Suite deployment.
Reporting Engineservice rsasoc_re restart/var/netwitness/re-server/rsa/soc/reporting-engine/logs/reporting-engine.logRE services is same as in 10.x versions
Respond Serverservice rsa-nw-respond-server restart/var/log/netwitness/respond-server/respond-server.logIts basically rsa-im service of 10.x, responsible for Respond on 11.x (IM on 10.x)
Security Serverservice rsa-nw-security-server restart/var/log/netwitness/security-server/security-server.logThe NetWitness Suite Security Server (Security server) manages the security infrastructure of a NetWitness Suite deployment. It handles the following security-related concerns.

 Users and the authentication accounts
Role Based Access Control (RBAC)
Deployment PKI infrastructure

 

 

Additional Services
Jetty service jetty restart /var/lib/netwitness/uax/logs/sa.logSame as in10.x version
SMS service rsa-sms restart /opt/rsa/sms/logs/sms.logSame as in10.x version
Collectd service collectd restart NASame as in10.x version
Salt Masterservice salt-master restart/var/log/salt/masterIt runs on the Admin server
Salt Minionservice salt-minion restart/var/log/salt/minionIt runs on all hosts
Salt APIservice salt-api restart/var/log/salt/apiIt runs on the Admin server
Labels:
  • Resources
  • NetWitness
  • NW
  • NWP
  • Resources
  • RSA NetWitness
  • RSA NetWitness Platform
21 Likes
Share
2 Comments

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

  • Comment
Latest Articles
  • Hunting Misconfigured Web Applications
  • Examining APT27 and the HyperBro RAT
  • FirstWatch Threat Spotlight: DarkTortilla
  • Sliver C2 – Network and Endpoint Detection with NetWitness Platform
  • Configure Channel Filter Settings on Endpoint Windows Log Policy
  • NetWitness Platform XDR version 12.1 -- Threat-Centric Content Bundles
  • Phase II Content Hygiene Initiative Complete: EDR (Endpoint) Application Rule Hygiene Initiative
  • FirstWatch Threat Spotlight: BlackCat Ransomware
  • FirstWatch Spotlight: Cyclops Blink – Sandworm’s Newest Addition to The Arsenal
  • FirstWatch Threat Spotlight – Raspberry Robin
Labels
  • Announcements 58
  • Events 2
  • Features 9
  • Integrations 6
  • Resources 61
  • Tutorials 25
  • Use Cases 23
  • Videos 116
Powered by Khoros
  • Blog
  • Events
  • Discussions
  • Idea Exchange
  • Knowledge Base
  • Case Portal
  • Community Support
  • Product Life Cycle
  • Support Information
  • About the Community
  • Terms & Conditions
  • Privacy Statement
  • Acceptable Use Policy
  • Employee Login
© 2022 RSA Security LLC or its affiliates. All rights reserved.