NetWitness Community

NikolayKlender · ‎2017-09-28

Hi! How to reload particular envision log parser after xml file was modified at filesystem of logdecoder?

SravanKoneti1 · ‎2017-09-28

Hi Nikolay,

Please use 000017847 - How to reload parsers on a Decoder or Log Decoder via the RSA Security Analytics UI

For more details on Parser uploading refer:https://community.rsa.com/thread/192023?commentID=893509#comment-893509

GuyBruneau · ‎2017-09-28

Hi Nikolay,

This method will reload all the parsers:

Via Decoder/LogDecoder Command Line

curl http://admin:Password@IP:50104/decoder/parsers?msg=reload;

Via browser

http://admin:Password@IP:50104/decoder/parsers?msg=reload

NaushadKasu1 · ‎2017-09-28

You can either do one of the following:

1. In View --> Config, enable and disable a parser. This will force the reload of all parsers.

2. In View --> Explore, navigate down to ‘decoder’ then ‘parsers’. Right-click on ‘parsers’ and click ‘properties’. In the bottom right window, select ‘reload’ then click ‘Send’.

UPCOMING OUT OF OFFICE

PTO: October 3-6

<http://rsa.im/2pfI6hJ>

NetWitness Community

Log parser reload