This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject

NetWitness Community

  • Home
  • Products
    • NetWitness Platform
      • Advisories
      • Documentation
        • Platform Documentation
        • Known Issues
        • Security Fixes
        • Hardware Documentation
        • Threat Content
        • Unified Data Model
        • Videos
      • Downloads
      • Integrations
      • Knowledge Base
    • NetWitness Cloud SIEM
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Detect AI
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Investigator
    • NetWitness Orchestrator
      • Advisories
      • Documentation
      • Knowledge Base
      • Legacy NetWitness Orchestrator
        • Advisories
        • Documentation
  • Community
    • Blog
    • Discussions
    • Events
    • Idea Exchange
  • Support
    • Case Portal
      • Create New Case
      • View My Cases
      • View My Team's Cases
    • Community Support
      • Getting Started
      • News & Announcements
      • Community Support Forum
      • Community Support Articles
    • Product Life Cycle
    • Support Information
    • General Security Advisories
  • Training
    • Blog
    • Certification Program
    • Course Catalog
      • Netwitness XDR
      • EC-Council Training
    • New Product Readiness
    • On-Demand Subscriptions
    • Student Resources
    • Upcoming Events
    • Role-Based Training
  • Technology Partners
  • Trust Center
Sign InRegister Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
TiagoCardoso
TiagoCardoso Beginner
Beginner
since ‎2018-04-26
‎2021-04-13

User Statistics

  • 18 Posts
  • 0 Solutions
  • 6 Likes given
  • 0 Likes received
First Reply
Conversationalist
Break the Ice
View all badges
  • NetWitness Community
  • About TiagoCardoso

User Activity

  • Posts
  • Replies

Can't access cases

by TiagoCardoso 2018-12-26 general.in Community Support Forum • latest reply by JayneTaylor 2018-12-26
2018-12-26
I can't login in My Cases Tab. It says "We can't log you in. Check for an invalid assertion in the SAML Assertion Validator (available in Single Sign-On Settings) or check the login history for failed logins." I already register as partner and i can'...

ESA rule - Search on raw

by TiagoCardoso 2018-10-25 general.in NetWitness Discussions • latest reply by EricPartington 2018-11-08
2018-10-25
Hello, Is there any way to make an ESA rule search for a particular word that is not parsed into meta key?

EPL question - Integer to string

by TiagoCardoso 2018-09-26 general.in NetWitness Discussions • latest reply by AngelaStranahan 2018-09-27
2018-09-26
Hello all, I'm trying to create an ESA rule, based on a list. The problem is that the ip_dstport is in integer and not in string, and the auto conversion is forbidden. Anyone knows a way to convert the ip_dstport in string inside the rule?

rn, cid tags and there importance

by TiagoCardoso 2018-04-30 general.in NetWitness Discussions • latest reply by LeonardC 2018-05-02
2018-04-30
Hello, I have a questions about the logs: What is the meaning of the tag's "rn" and "cid" and its importance for first-line analysis?%NICWIN-4-Security_4673_Microsoft-Windows-Security-Auditing: Security,rn=554470018 cid=704 eid=696,Sun Apr 29 11:26:0...

Re: Can't access cases

by TiagoCardoso 2018-12-26 general.in Community Support Forum • latest reply by JayneTaylor 2018-12-26
2018-12-26
Hello Jayne, My manager deleted the account and add again and the problem is solved. You can close that case. Thank you.

Re: ESA rule - Search on raw

by TiagoCardoso 2018-11-08 general.in NetWitness Discussions
2018-11-08
Done that. Still not working...

Re: ESA rule - Search on raw

by TiagoCardoso 2018-11-07 general.in NetWitness Discussions • latest reply by MohammedMustafa 2018-11-08
2018-11-07
No, its not there. But if i open the log and click " View meta" the disposition meta key is there and parsed.

Re: ESA rule - Search on raw

by TiagoCardoso 2018-11-07 general.in NetWitness Discussions • latest reply by MohammedMustafa 2018-11-08
2018-11-07
I done as you and its still not working... im querying the concentrator. I also tried to query the broker and its the same. The meta key is there but nothing is parsed.

Re: ESA rule - Search on raw

by TiagoCardoso 2018-11-06 general.in NetWitness Discussions • latest reply by MohammedMustafa 2018-11-08
2018-11-06
in the log decoder, in table-map.xml don't you have already a key created for disposition? or did you put it in a comment line?
View more
Likes given to
User Count
JoshRandall
Valued Contributor JoshRandall Valued Contributor
2
JohnKisner
Trusted Contributor JohnKisner Trusted Contributor
1
LeonardC
Trusted Contributor LeonardC Trusted Contributor
1
AlexeyFedorov
AlexeyFedorov Frequent Contributor
2
View all
Powered by Khoros
  • Blog
  • Events
  • Discussions
  • Idea Exchange
  • Knowledge Base
  • Case Portal
  • Community Support
  • Product Life Cycle
  • Support Information
  • About the Community
  • Terms & Conditions
  • Privacy Statement
  • Acceptable Use Policy
  • Employee Login
© 2022 RSA Security LLC or its affiliates. All rights reserved.