000026502 - How to start and stop capture and aggregation on RSA Security Analytics appliances using NwConsole

Document created by RSA Customer Support Employee on Jun 14, 2016•Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000026502
Applies ToRSA Security Analytics
RSA Security Analytics Decoder
RSA Security Analytics Log Decoder
RSA Security Analytics Concentrator
RSA Security Analytics Hybrid
RSA Security Analytics Broker
RSA Security Analytics All-in-One
RSA NetWitness NextGen
RSA NetWitness NwConsole
IssueHow to start and stop capture and aggregation on RSA Security Analytics appliances using NwConsole.
How can I stop and start aggregation on my concentrator or broker appliance from the command line?
What is the method for stopping and starting capture on my decoder or log decoder device from NwConsole?
Resolution

The following commands may be used to start and stop aggregation or capture on RSA Security Analytics core appliances using NwConsole:


 Task Appliance Command
 Start Capture Decoder NwConsole -c login localhost:50004 <username> <password> -c send /decoder start
  Log Decoder NwConsole -c login localhost:50002 <username> <password> -c send /logdecoder start
 Stop Capture Decoder NwConsole -c login localhost:50004 <username> <password> -c send /decoder stop
  Log Decoder NwConsole -c login localhost:50002 <username> <password> -c send /logdecoder stop
 Start Aggregation Concentrator NwConsole -c login localhost:50005 <username> <password> -c send /concentrator start
  Broker NwConsole -c login localhost:50003 <username> <password> -c send /broker start
 Stop Aggregation Concentrator NwConsole -c login localhost:50005 <username> <password> -c send /concentrator stop
  Broker NwConsole -c login localhost:50003 <username> <password> -c send /broker stop

 

 


If you are unsure of any of the commands above or experience any issues, contact RSA Support and quote this article ID for further assistance.

Legacy Article IDa66530

Attachments

    Outcomes