Do the following steps to install NetWitness Export Connector .
-
Download the offline installer from RSA Link in the following location: NetWitness Export Connector Installer.
-
Copy the downloaded NetWitness ZIP archive to the system where Logstash runs.
-
Open a command prompt and run the following command to change directory to Logstash home.
cd /usr/share/logstash - Check the status of the Logstash service by running the following command.
systemctl status logstash - Stop the Logstash service by running the following command.
systemctl stop logstash - Install the NetWitness Export Connector by running the following command.
bin/logstash-plugin install file:///<path-to-file>/netwitness-export-connector-1.1.0.zip - Make sure that all the required configuration files (netwitness-<decoder-ip>-input.conf) are available in the following folder.
/etc/logstash/conf.d/ - Start the Logstash service by running the following command.
systemctl start logstash
Previous Topic:Install Logstash
Next Topic:Configure NetWitness Export Connector
You are here
Table of Contents > Install NetWitness Export Connector