This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject

NetWitness Community

  • Home
  • Products
    • NetWitness Platform
      • Advisories
      • Documentation
        • Platform Documentation
        • Known Issues
        • Security Fixes
        • Hardware Documentation
        • Threat Content
        • Unified Data Model
        • Videos
      • Downloads
      • Integrations
      • Knowledge Base
    • NetWitness Cloud SIEM
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Detect AI
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Investigator
    • NetWitness Orchestrator
      • Advisories
      • Documentation
      • Knowledge Base
      • Legacy NetWitness Orchestrator
        • Advisories
        • Documentation
  • Community
    • Blog
    • Discussions
    • Events
    • Idea Exchange
  • Support
    • Case Portal
      • Create New Case
      • View My Cases
      • View My Team's Cases
    • Community Support
      • Getting Started
      • News & Announcements
      • Community Support Forum
      • Community Support Articles
    • Product Life Cycle
    • Support Information
    • General Security Advisories
  • Training
    • Blog
    • Certification Program
    • Course Catalog
      • Netwitness XDR
      • EC-Council Training
    • New Product Readiness
    • On-Demand Subscriptions
    • Student Resources
    • Upcoming Events
    • Role-Based Training
  • Technology Partners
  • Trust Center
Sign InRegister Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
JamesMoon
Frequent Contributor JamesMoon Frequent Contributor
Frequent Contributor
since ‎2015-10-21
‎2022-10-17

User Statistics

  • 39 Posts
  • 2 Solutions
  • 8 Likes given
  • 17 Likes received
Time Honored
Frequent Flyer
Making Yourself at Home
Welcome Back!
View all badges
  • NetWitness Community
  • About JamesMoon

User Activity

  • Posts
  • Replies
No posts to display.

Re: Using event metadata into run external script

by JamesMoon 2021-12-15 general.in NetWitness Discussions
2021-12-15
Hi Jeremy, Just updating this post as well in case other customers might find it useful. The example in the following article should help you getting started. https://community.rsa.com/t5/netwitness-blog/v11-3-changes-to-esa-script-outputs/ba-p/52073...

Re: How apply a parser for a device

by JamesMoon 2021-11-17 general.in NetWitness Discussions • latest reply by Kamarul 2021-11-19
2021-11-17
Hi Kamarul, Please refer to the following link instead as the old/outdated link is no longer available. https://community.rsa.com/t5/netwitness-platform-online/enable-parser-mappings/ta-p/621048 Regards,James

Re: Endpoint Server NWE - Why are files showing on zero 0 hosts

by JamesMoon 2021-11-13 general.in NetWitness Discussions
2021-11-13
Hi Jeremy, "ON HOSTS" value changes based on verify_file command sent to the agent to verify if the file exists on it. The files showing 0 count indicates that they were found by at least one agent before but removed since then. If you happen to find...

Re: There is a problem in the Windows Parser in event ID 4756

by JamesMoon 2021-11-13 general.in NetWitness Discussions
2021-11-13
Hi Jeremy, I'll update this post as well as the Support case when I have an update from Content team. Thanks.

Re: Historical Graph Is not Displaying Trend

by JamesMoon 2021-11-13 general.in NetWitness Discussions
2021-11-13
Hi team, This issue might be related to the following issue which is fixed in 11.4.1.3. SACE-13666/ASOC-101606 For Hybrids, few statistics on the Health and Wellness are not showing the historical representation of the graph. However, numbers are dis...
View more
Likes from
User Count
Anonymous
7
ChristopherTenn
ChristopherTenn Beginner
1
EricSchwartz1
EricSchwartz1 Contributor
1
EricaChalfin
Employee (Retired) EricaChalfin Employee (Retired)
1
XuanangLi
XuanangLi Beginner
1
View all
Likes given to
User Count
david_waugh
david_waugh Beginner
1
KevinArunski
KevinArunski Contributor
1
View all
Powered by Khoros
  • Blog
  • Events
  • Discussions
  • Idea Exchange
  • Knowledge Base
  • Case Portal
  • Community Support
  • Product Life Cycle
  • Support Information
  • About the Community
  • Terms & Conditions
  • Privacy Statement
  • Acceptable Use Policy
  • Employee Login
© 2022 RSA Security LLC or its affiliates. All rights reserved.