000037333 - Establish Communication between the RSA NetWitness Server & Virtual Log Collector (VLC) Deployed Outside of Network

Document created by RSA Customer Support Employee on Apr 12, 2019•Last modified by RSA Customer Support Employee on May 7, 2019
Version 3Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000037333
Applies ToRSA Product Set: NetWitness Logs & Network
RSA Product/Service Type: NetWitness Server, NetWitness UI, Virtual Log Collector (VLC)
RSA Version/Condition: 11.3
Platform: CentOS 
O/S Version: 7
TasksThe following steps can be used to establish communication between the RSA NetWitness Server and the Virtual Log Collector (VLC) deployed outside of a private network when a VLC is deployed outside of a private network in a Network Address Translation (NAT) environment. 
Resolution
  1. Update the /etc/hosts file on the VLC host from `<ip-address-of-nw-server> nw-node-zero` to `<ip-address-of-nw-server> nw-node-zero <UUID-of-nw-server>`.

    Run the following command to retrieve the UUID of the RSA NetWitness Server host.




    # cat /etc/salt/minion 


    This is an example of the UUID for an NW Server host.
    host.id: ba847be4-afca-4df4-beca-e6df7ac3a228
     


  2. Log into the RSA NetWitness Platform version 11.3 and navigate to ADMIN > Hosts.
  3. Select the NW Server host and click (Edit icon).
    Step 3 - Select the NW Server host and click the Edit icon


    The "Edit Host" dialog is displayed. For example: 
    Step 3 - the Edit Host dialog
     
  4. Change the Hostname from the <ip-address> to nw-node-zero and click Save. For example: 
    Step 4 - Change the Hostname from the ip-address to nw-node-zero and click Save

Attachments

    Outcomes