000037724 - Receiving the error "Error 'Access is denied' occurred while saving predicate" in Investigate in RSA NetWitness Logs & Network

Document created by RSA Customer Support Employee on Jul 19, 2019
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000037724
Applies ToRSA Product Set: NetWitness Logs & Network
RSA Product/Service Type: NetWitness UI
RSA Version/Condition: 11.3.x
Platform: CentOS
O/S Version: 7
IssueWhen attempting to run a query in the RSA Netwitness UI > Investigate > Navigate, the error "Error 'Access is denied' occurred while saving predicate" occurs.
Resolution
  1. For a role that is running into this issue, go into the RSA NetWitness UI and navigate into Admin > Security > Roles. 
  2. Select a role that is running into the error "Error 'Access is denied' occurred while saving predicate" while attempting to run a query in Investigate, and edit the permissions. 
  3. Under the "investigate-server" tab, make sure that the "investigate-server.predicate.read" permission is checked. 


    permissions
     


  4. Save the permissions. 
  5. Run an Investigation as that role that the permissions were just modified for.
  6. Repeat Steps 1-5 for any other role running into this issue. 

Please see "Task 4. Modify the Analyst Role investigate-server Permissions" under the "General" section in the following documentation for further information: https://community.rsa.com/docs/DOC-101871 

Attachments

    Outcomes