Where do I get documentation on updating the NetWitness Concentrator XML files?
I've moved your question to the RSA NetWitness Platform" data-type="space space where it will be seen by the product's support engineers, other customers and partners. Please bookmark this page and use it when you have product-specific questions.
Alternatively, from the RSA Customer Support" data-type="space page, click on Ask A Question on the blue navigation bar and choose Ask A Product Related Question. From there, scroll to RSA NetWitness Platform" data-type="space and click Ask A Question. That way your question will appear in the correct space.
what are you trying to achieve?
best practices - edit only the index-concentrator-custom.xml and not the index-concentrator.xml (RSA will update the non custom file and wipe your changes if you edit that one)
Trying to setup a ThreatConnect feed and one of the steps is to update the index-concentrator-custom.xml
From this guide?
page 15 shows you the changes that are necessary for the table-map-custom and the index-concentator-custom.xml
you can get access to these files via the admin > service > (concentrator) > Config > files section
save the changes , then restart the service
table-map is on a log decoder service
index-concentrator-* is on the concentrator service