Hi NetWitness Family, I need to know if there is an option to receive
output via email instead of the scheduled report if any one
result(event) is generated.
Hi NetWitness family, I want to create many metakeys that fall under the
'msg' meta category. Does anyone have a step-by-step process for
creating custom metakeys? Please help!
Hi NetWitness Community, We upgraded the version from 12.4.1.0 to
12.5.0.0. After the upgrade, we received a new home page with many
custom widgets. However, when I try to configure anything, it doesn't
work and displays an error : Respond Server off...
Hi Arasnick, Thank you for your quick response. However, on my side, the
hostname is only showing with the IP address. I am facing this issue
only on my single system.
Hi JohnKisner This problem is happening only on my system. When I try on
another system, the Respond server does not show as offline. If any
other user logs into my system, they experience the same problem, but
there is no issue on their own systems....
Thakyou @JohnKisner Yes, the custom parser rule is the only way to
create a custom meta key. Could you please assist me in creating the
custom rule in the log parser? We have documents in NetWitness, but they
are not entirely understandable
Hello DaveGlover, Can we create an email notification for any generated
alert ID? For example, if a user is added to Active Directory, I need an
email notification instead of a scheduled report.
@JohnKisner Thank you for your response. In my scenario, I want to
create a rule that triggers an alert from the SIEM whenever changes
occur in the firewall, such as when an object is added or a policy or
rule is created, modified, or deleted. We hav...
