NetWitness Community

HI All,Just wanted to check, is there any tool or script to convert ESA rule logic to query format.

Hi all,The age_in_seconds value provided to reclaim_group_aged should1. Match the time window added to the statement.2. Double the time window added to the statement.3. Any other commentsThank you in advance

Hi All, Can i Modify rules in live content as per our requirement?

ESA question :I have 2 events coming in - 2 events are from different device type with different contents. both arriving within say 5-10 Minutes.I need to create a rule that matches 5-10 minutes previous event from one device type with the real time ...