Export Data to RSA

A NetWitness administrator can export the metrics in NetWitness for Live Feedback.

About Live Feedback

In the Live Services Configuration panel, there is a Live Feedback Activity Log which enables you to download the usage data required for Live Feedback. This is active regardless of the Live Account configuration.

If the Live Account is not configured, you can manually upload the usage data to RSA. For more information, see the "Configure Live Services Panel" topic in the System Configuration Guide.

You must first download the Live Feedback historical data, and then upload it to share with RSA.

Download Live Feedback Historical Data

To download the Live Feedback historical data:

  1. Go to netwitness_adminicon_25x22.png (Admin) > System.

  2. In the options panel, select Live Services.

    The Live Account screen is displayed which consists of the RSA Live Status and Download Live Feedback Activity Log.

  3. Click Live Feedback Activity Log.

    The Live Feedback Activity Log window opens which allows you to download the required Live Feedback historical data.

    ​netwitness_livefeedbackactivity.png

  4. Select one or multiple entries by selecting the checkboxes and click Download. ​

    Note: If you select multiple entries in the history table, the Live Feedback data is downloaded into a ZIP archive, consisting of individual JSON files for each month.

Share Telemetry Data to NetWitness

After you download the Live Feedback data, you can then upload it using the following procedure.

Note:
- To download the Live Feedback data, see topic Download Live Feedback Historical Data.
- You can share data through NetWitness XDR Cloud Services Live portal. For more information, Create Live Account.

To share the data to NetWitness

  1. Log in to the NetWitness XDR Cloud Services using your Live account credentials.
  2. Click netwitness_live_ui_telemetry_22x17.png on the left panel.

    The Telemetry Logs dialog is displayed.

    netwitness_live_ui_upload_219x134.png

    Note:
    - You can upload only .zip files.
    - Filename must be 255 characters or less and file size must be less than 128 MB.

  3. Click or drag-and-drop a file onto this area to upload.