XML update

[Miguel]

Where do I get documentation on updating the NetWitness Concentrator XML files?

[EricaChalfin]

Miguel Lallana‌,

I've moved your question to the RSA NetWitness Platform" data-type="space space where it will be seen by the product's support engineers, other customers and partners.  Please bookmark this page and use it when you have product-specific questions.

Alternatively, from the RSA Customer Support" data-type="space‌ page, click on Ask A Question on the blue navigation bar and choose Ask A Product Related Question.  From there, scroll to RSA NetWitness Platform" data-type="space and click Ask A Question.  That way your question will appear in the correct space.

Regards,

Erica

[EricPartington]

what are you trying to achieve?

best practices - edit only the index-concentrator-custom.xml and not the index-concentrator.xml (RSA will update the non custom file and wipe your changes if you edit that one)

[Miguel]

Hello Eric,

Trying to setup a ThreatConnect feed and one of the steps is to update the index-concentrator-custom.xml

Thank you,

Miguel

[EricPartington]

From this guide?

https://community.rsa.com/docs/DOC-66221

page 15 shows you the changes that are necessary for the table-map-custom and the index-concentator-custom.xml

you can get access to these files via the admin > service > (concentrator) > Config > files section

save the changes , then restart the service

table-map is on a log decoder service

index-concentrator-* is on the concentrator service

[Miguel]

Thanks Eric.