Hi, The following IP addresses are excluded from network isolation by
default: Endpoint Server, Relay Server, DNS, Gateway, DHCP, 0.0.0.0 and
255.255.255.255, and they are not configurable. Customer can enter other
IP addresses in the exclusion list ...
Dear Riccardo, I copied the article content here for your reference. RSA
Security Analytics Demo Log Traffic Simulation with NwLogPlayer Log
Traffic Simulation Loading ad hoc log files may be done through the RSA
Security Analytics interface or by ru...
Dear Riccardo, I trust this message finds you well. In relation to
testing an ESA rule online, I would recommend the following steps. 1.
Configure ESA deployment and data source for testing purpose. 2. Deploy
the rule into ESA deployment. Additionall...
Dear Riccardo, To my understanding there exists a limitation within the
Netwitness ESA Test Rule section pertaining to the integration of
Interval (timer:interval). It is imperative to note that currently,
there is no available method to test the tim...
Hi Igor, The logcollector filter json file is located at vlc
/etc/netwitness/ng/logcollection/eventfilters// folder.
You may create a filter on one vlc via UI and copy the
folder from the vlc to other vlc and restart logcollector service. I
hope thi...
