Do the following steps to install Netwitness MetaExport.
-
Run the following command on the Decoder.
yum install rsa-nw-metaexport-utility
-
The utility internally will install the open source version of logstash (OSS) as a dependency to the metaexport-utility. For more information on released versions of Logstash, refer Logstash Reference.
-
After completing the logstash installation, the utility will proceed to install the Export connector input plugin.
-
The utility will also install the logstash syslog output plugin.
Note: NetWitness MetaExport uses logstash syslog output plugin to ship the metas to any third party application. Hence, you should create the syslog receiver on the third party application side to process the incoming metas.