The content you are looking for has been archived. View related content below.
The NetWitness Recovery Tool (NRT) is a CentOS 7 rpm package included from NetWitness 11.1.x and later on all NetWitness appliances.
NetWitness 11.1.x Note: The NetWitness Recovery Tool is an initial Alpha release, it is not officially supported by RSA Engineering. There was no official announcement for this script, and no documentation, but it can be used like the later NetWitness 11.2+ versions.
Use the following command to confirm the NetWitness Recovery Tool rpm is installed on NetWitness 11.1.x or later.
For example:
# rpm -q rsa-nw-recovery-tool rsa-nw-recovery-tool-11.5.1.0-2009021401.5.23178da.el7.noarch
The NetWitness Recovery Tool can be used to:
The documentation on how to use the NetWitness Recovery Tool is available on the RSA Link website:
Note: The NetWitness Recovery Tool must be run on each host system locally for backup and restore. NRT cannot be run from a remote host.
These scripts are designed to run on CentOS 6 only. The scripts must be run on CentOS 6 machines.
The backup and restore scripts do not support backup and restore for STIG or FIPS hardened hosts. The only workaround is to backup before hardening the appliance, and after a restore harden the appliance again.
The restore script is only supported for NetWitness 10.6.2.0 to 10.6.6.x.
Note: The nw-backup-v4.6, supersedes all previous nw-backup versions.
nw-backup-v4.6 can be used to: