Import or Export Rules

The topic provides instructions to import ESA rules from a NetWitness instance and to export ESA rules to your hard drive so you can keep a local copy.

If you exported a rule in an earlier version of NetWitness, the following conditions apply when you import the rule in version 10.5 or later:

  • Exported in version 10.3 – You cannot import rules to version 10.5 or later.
  • Exported in version 10.4 – You can import rules to version 10.5 or later.

Import ESA Rules

  1. Go to netwitness_configureicon_24x21.png (Configure) > ESA Rules > Rules tab.
    The Rules tab is displayed.
    netwitness_esarulestb.png
  2. In the Rules Library toolbar, select netwitness_ic-actns.png​ > Import.
    The Import ESA Rules dialog is displayed.
    netwitness_impesarls_288x83.png
  3. Click Browse to browse and select the file containing the ESA rules.
  4. Click Import.

Export ESA Rules

  1. Select an ESA rule or multiple rules and select netwitness_ic-actns.png​ > Export in the Rule Library toolbar.
    A warning dialog is displayed.
  2. Click Yes.
    The Export Rules dialog is displayed.
  3. In the Enter File Name field, type a filename for the file with the ESA rules and click Export.
    The file is exported as a binary file to your machine.

Note: The binary file cannot be edited.