000039135 - How to remove the Investigate links seen in the Reporting Engine PDF Output in NetWitness Platform

Document created by RSA Customer Support Employee on Aug 10, 2020
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000039135
Applies ToRSA Product Set: RSA NetWitness Platform
RSA Product/Service Type: Core Appliance
RSA Version/Condition: 11.x and later
IssueRSA NetWitness Reporting Engine can export the report output as a PDF file when using email output as an attachment or saving as a PDF from the NetWitness UI. Investigation links are created automatically in the PDF file output. Some users may want to remove the investigation links from the PDF file.

Example of PDF output showing the hyperlink on the Source IP Address column items.
User-added image
ResolutionTo keep the links from generating in the Reporting Engine outputs follow these steps. Keep in mind that this will affect all Reporting Engine report outputs that contain these links.
  1. Go to Admin -> Services -> Reporting Engine -> Config view -> Output Actions, and remove the contents of the Hostname field then click 'Apply'.
    User-added image
  2. Generate the PDF for the report within the Reporting Engine. The investigation links are now removed from the PDF output.
    User-added image