NetWitness Community

Anonymous · ‎2013-11-09

I want to configure DAC with SA decoder and concentrator, so that all coming logs n packectes directly store on DAC rather than internal storage of appliances. What will be configuration, can anyone help?

Sent from Samsung Mobile

AdamRasnick · ‎2013-11-14

Is this a hybrid? Or is it separate appliances? Have you licensed the devices yet? If it is separate appliances, you will need the nwinitarray.py script on each appliance, which must be run before licensing the devices. If its a hybrid, you will need to license the hybrid and then run nwmakearray.py script on the hyrid.

View solution in original post

huanzhou1 · ‎2013-11-10

search for nwinitarray.py in the KB.

Or you can create your own mapping using the rail and lvm.

AdamRasnick · ‎2013-11-14

Is this a hybrid? Or is it separate appliances? Have you licensed the devices yet? If it is separate appliances, you will need the nwinitarray.py script on each appliance, which must be run before licensing the devices. If its a hybrid, you will need to license the hybrid and then run nwmakearray.py script on the hyrid.

Anonymous · ‎2013-11-14

No, its a separate appliance not hybrid. I have high density direct attach capacity for decoder and high performance direct attach capacity for concentrator as a separate appliance. I have connected to decoder and concentrator but i dont know how to map with decoder and concentrator database so that all packets and meta key directly store in thier respective DAC rather than internal storage.

Or can you tell me from where i can get that script or where n how i have to run? Does license will matter?

Actually, I am new with storage i have never worked on storage.

Thanx

Sent from Samsung MobileAdam Rasnick <emc-community-network@emc.com> wrote:ECN

Can anyone help me in configuring DAC with decoder and concentrator

reply from Adam Rasnick in RSA Security Analytics - View the full discussion

Is this a hybrid? Or is it separate appliances? Have you licensed the devices yet? If it is separate appliances, you will need the nwinitarray.py script on each appliance, which must be run before licensing the devices. If its a hybrid, you will need to license the hybrid and then run nwmakearray.py script on the hyrid.

Reply to this message by replying to this email, or go to the message on ECN

Start a new discussion in RSA Security Analytics by email or at ECN

Following Can anyone help me in configuring DAC with decoder and concentrator in these streams: Inbox

AdamRasnick · ‎2013-11-14

So you have a DAC + decoder and a DAC + concentrator? Just clarifying because it matters how you set them up. And I can send you the scripts to run for this.

huanzhou1 · ‎2013-11-15

can upload the script here? thanks.

AdamRasnick · ‎2013-11-15

I thought i uploaded the scripts...let me try it again and if you dont get the scripts let me know and i can email them.

huanzhou1 · ‎2013-11-15

Thanks a lot. will test out. who maintain the script?

AdamRasnick · ‎2013-11-15

The scripts are maintained by RSA. Which devices are you using those for? They are specific depending on the appliances you are using.

Anonymous · ‎2013-11-15

Hi Adam, I am also using RSA Devices for security analytics. Can you please share that script with me and please tell me how and where( I mean on Decoder/concentrator or DAC) I have to run so that log and packets directly goes to DAC instead of internal storage of Decoder and Concentrator.

Or if you have any document for DAC so that I can change their management IP address then Please share that also.

My Email id is rajveeryadav004@gmail.com

Thanx

Waiting for reply and help