How to forward the Windows PowerShell Transcription Logs which is stored
locally on the AD server or which are stored on a centralised server to
RSA netwitness
Version of SA 11.1 We have problem in creating custom feed using the
stored csv file which we have pull from one of our indicators source and
store it in SA Head under /var/netwitness/srv/www/rsa/feeds. Below is
the error I see in SA logs jetty.sh: 2...
One more observation if i run the same command with -CAfile followed by
path where my custom certificate is stored then I dont see any error and
it returns - Verify return code: 0 (ok) openssl s_client -connect
:443 -CAfile /etc/pki/nw/web/web-server...
Thankyou for taking time to revert back on my query, I have tried all
the mentioned option but still having the same issue. But getting below
error which is strange when I checked my server certificate with the
given openssl command verify error:num=...
Thankyou Angela.. we are currently running netwitness 11.1 and RSA CS
was asking if we have NW Endpoint Server in our infra which we do not
have and something I am exploring as well for this endpoint agent.
Thank You Joshua.. This was helpful and we are seeing powershell logs
now.. Now we will explore what events to include inside Windows
powershell logging..
