Start, Stop, or Restart ESA Service

[#1]

Start, Stop, or Restart ESA ServiceStart, Stop, or Restart ESA Service

This topic provides instructions to start, stop, or restart the ESA Correlation service from the NetWitness user interface and from the command line. These procedures apply to ESA Correlation Rules.

Start the ESA ServiceStart the ESA Service

1. Log on to NetWitness as admin.
2. Go to (Admin) > Services.
3. Select the ESA Correlation service and then select > Start.

Stop the ESA ServiceStop the ESA Service

1. Log on to NetWitness as admin.
2. Go to (Admin) > Services.
3. Select the ESA Correlation service and then select > Stop.

Restart the ESA ServiceRestart the ESA Service

1. Log on to NetWitness as admin.
2. Go to (Admin) > Services.
3. Select the ESA Correlation service and then select > Restart.

Start the ESA Service from the Command LineStart the ESA Service from the Command Line

1. Use ssh to connect to the ESA Correlation service and log in as the root user.
2. Type the following command and press ENTER:
   systemctl start rsa-nw-correlation-server

Stop the ESA Service from the Command LineStop the ESA Service from the Command Line

1. Use ssh to connect to the ESA service and log in as the root user.
2. Type the following command and press ENTER:
   systemctl stop rsa-nw-correlation-server

Restart the ESA Service from the Command LineRestart the ESA Service from the Command Line

1. Use ssh to connect to the ESA service and log in as the root user.
2. Type the following command and press ENTER:
   systemctl restart rsa-nw-correlation-server

Previous Page	Next Page