Complete the following tasks to prepare for the upgrade to NetWitness Platform 11.4.
Event Stream Analysis (ESA)
Task 1 - Delete ESA Rule Deployments that do not contain an ESA Correlation service
Unused ESA rule deployments left over from the migration from the 10.6 or 11.2 legacy Event Stream Analysis service, which do not contain an ESA Correlation service, cause ESA rule deployments to not deploy after upgrading to NetWitness Platform 11.4.
Before you upgrade to 11.4, delete ESA rule deployments that do not contain an ESA Correlation service. The remaining ESA rule deployments should have been deployed at least once with the ESA Correlation service.
To delete an ESA rule deployment,
- Go to Configure > ESA Rules > Rules tab.
- In the options panel to the left under Deployments, select the deployment that you want to remove.
- Select > Delete.
- Click Yes to confirm the delete.