NetWitness Community

SalSanshez · 2016-09-30

A customer requested to recreate specifically formatted email alert templates that they were getting from Trustwave. I put together the following script with the help of the following 2 solutions. : Report for ESA's Triggered Alerts with Raw Events (...

SalSanshez · 2016-09-24

https://community.rsa.com/docs/DOC-43142 Great post from Oj2tqPhEV7pi5mR8EY3PQXHtgPuI9Vk2SNDA9WW6hKQ=‌ Adding multiple ODBC sources with NWConsole and Excel

SalSanshez · 2017-02-03

Wardell, I just sent you the logging guide we used when we kicked off your project -sal

SalSanshez · 2016-11-29

Just ran into this yesterday. Thanks for the write up GKKxwgBy9sU0nCbYviD6G5r7VXv0d4jsoi0NgriKbn4=‌!

SalSanshez · 2016-11-09

You can run #cat /proc/scsi/scsi and #mpath -ll you should see the volumes being presented to the decoder from the storage system.

SalSanshez · 2016-10-14

Maybe you can use REST to pull logs on a regular basis? or NWSDK? Since you're not interested in the meta.

SalSanshez · 2016-10-14

Doesn't look like a simple way. But what is the intention of mailing the alert with the log? Are you sending to another SIEM, ticket system?

NetWitness Community

User Statistics

User Activity

Custom ESA email template with raw event payload

Adding Bulk ODBC event sources

Re: Log Levels and Device Types

Re: NwArrayConfig.py script errors on Series 5 Gear (older script versions)

Re: visibility into HA/HBA connectivity

Re: Full log payload in Alert

Re: Full log payload in Alert