Netwitness 11 - Ability to have users who can view logs only, packets only or a mixture?

[david_waugh]

One of the nice features we use in Netwitness 10.x is the ability to run a prequery on each user role.

However in Netwitness 11 this feature is not available.

How can I enforce the following role in Netwitness 11

• Ability to view logs only
• Ability to view packets only
• Ability to view logs and packets?

[Anonymous · Accepted solution]

Hi David

You can still do that in NetWitness 11. In the Edit Role screen there is the ability to set a Core Query Prefix:

[david_waugh]

Thanks very much Chris!

[david_waugh]

Hi in the 11.0.0.1 release notes it says

ASOC-42734 If you configured user or role attributes to restrict access to data through query prefix in 10.6.4.x, and upgrade to 11.0, it does not work.

Does the feature actually work in 11.0.0.2 or higher? Can anyone confirm?