NetWitness Community

someone · ‎2017-06-06

As the title suggests, I'm looking for IMtool along with its instructions.

TwinkleLath · ‎2017-06-06

Hi Marinos,

Download link:

How to use imtool:

Install (IN SA SERVER, SA NOT ESA)

- rpm -Uvh imtool-v.1.0-2.noarch.rpm

- imtool

Options:

Count alerts (Count sorted by source RE,ESA)

Count incidents

Count alerts in date range

Count incidents in date range

Delete all incidents from IM

Delete all alerts from IM

Delete a range of incidents

Delete date range of alerts

someone · ‎2017-06-07

Hi Twinkle,

Thank you for your prompt response. However I'm unable to access this page (I am guessing because it's internal?).

If this tool is supposed to be customer facing then a KB similar to 000032358 - Event Stream Analysis troubleshooting script (ESATool) for RSA Security Analytics would be great so other customers can leverage it and save time:)

Thanks,

Marinos

TwinkleLath · ‎2017-06-07

Hi Marinos,

Sure, we will create the KB.

For the time being, you can download from below link:

someone · ‎2017-06-07

Thanks again Twinkle,

I tweaked the link to work as it was broken. Here it is, in case anyone else wants to download it: imtool-v.1.0-3.noarch.rpm

Where to find IMtool rpm