Integrate Unsupported device to SA

[Anonymous]

Hi Everyone,

is anybody have idea, how to integrate an unsupported device to SA using file reader collection method.

I want to integrate a device that is not in event source list on SA under file collection type, any idea how we can add that unsupported device on SA device list ?

[LeeKirkpatrick · Accepted solution]

Hey Rajveer,

The definitions for supported file collection methods are in the following location:

/etc/netwitness/ng/logcollection/content/collection/file

Have a look at the pre-existing ones to understand how you could create your own. Simply add a new xml definition here and invoke a parser reload:

NwConsole -c login localhost:50002 <user> <password> -c decoder parsers reload

[Anonymous]

hey, thanks buddy.

Its working