Configure License Support For Multiple NetWitness Servers

If you have multiple NetWitness servers deployed in your environment, and require license support, you must configure multiple Mac addresses.

To configure online:

  1. Log in to the NetWitness Server console.
  2. Navigate to /opt/netwitness/flexnetls.
  3. Edit the local-configuration.yaml file and add the mac address of the back up or secondary host.
    For example, backup-hostid: 685B3596A5F3 or backup-hostid: "685B3596A5F3:785B3596A5F3".
  4. Restart systemctl restart flexnetls-RSALM.
  5. Obtain the instance details from wget http://localhost:3333/api/1.0/instances and set the "failOverRole" to MAIN to verify the failover.
    For example, "failOverRole" : "MAIN".

To configure offline:

  1. Perform the step 1 to step 6 from the online procedure .
  2. Download the capability request from NetWitness UI.
  3. Upload the request to FNO (myRSA).
  4. Upload the response from FNO (myRSA) to the NetWitness UI.

Configure License Notifications

This topic provides instructions for configuring notification settings for the Local License Server (LLS). If you wish to receive alerts about the approaching license expiration date, you can configure NetWitness to send notifications. You can receive notification by email, syslog and SNMP. You can also view the notification during system log on and in the Notification Tray. You can also specify the number of days before expiration as a threshold for notification.

Note: In the Analyst UI, the license notifications will not be displayed in the notification tray or login window when the license goes out of compliance or when the license expires. This is displayed only on the Admin UI.

To configure the notification:

  1. Go to netwitness_adminicon_25x22.png (Admin) > System.
  2. Select Licensing.

  3. Select the Settings tab.

    122_LicSet1_1122.png

  4. Select each of the methods for NetWitness to use when sending a notification about the license status.

    1. To receive a notification at log on, select Login and specify the number of days before the license expires that you want to receive notification in the Login Window Threshold field.
    2. To receive a notification in the Notifications tray, select Notification Tray and specify the number of days before the license expires that you want to receive notification in the Notification Tray Threshold field.
    3. To receive an Email notification to a configured distribution list, select Email and select Configure email or distribution list. The Email panel is displayed in a separate tab, and you can configure notifications in the Email Server Settings section. Refer to the System Configuration Guide for further details.
    4. To receive syslog notifications, select Syslog and click Configure Syslog and SNMP Trap servers. The System Auditing panel opens in another tab and you can configure the system settings.
    5. To receive notifications through SNMP Trap, select SNMP Trap and select Configure Syslog and SNMP Trap servers. The System Auditing panel opens in another tab and you can configure the SNMP auditing settings.
  5. Click Apply Notifications.
    The settings are saved and go into effect immediately.