000026774 - How to reload parsers on an RSA NetWitness Platform decoder or log decoder using NwConsole

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support on Sep 26, 2019
Version 4Show Document
  • View in full screen mode

Article Content

Article Number000026774
Applies ToRSA Product Set: Security Analytics, NetWitness Logs & Network
SA Product/Service Type: Decoder, Log Decoder
RSA Version/Condition: 10.x, 11.x
Platform: CentOS
O/S Version: EL6, EL7
IssueHow to reload parsers on an RSA NetWitness decoder or log decoder using NwConsole.
How do I perform a parser reload using NwConsole?

In order to reload parsers on an RSA NetWitness or RSA Security Analytics decoder or log decoder appliance using the NwConsole interface, follow the steps below.

  1. Connect to the appliance via SSH.
  2. Issue the command NwConsole to access the NwConsole interface.
  3. At the prompt, issue one of the commands below to login to the appropriate service:
         Decoder:  login localhost:50004 <username>
         Log Decoder:  login localhost:50002 <username>
  4. Enter the appropriate password when prompted.
  5. Issue the following command to reload the parsers:  parsers reload
  6. Type exit to end the NwConsole session.

If you are unsure of any of the above steps or encounter issues, contact RSA Support and quote this article ID for further assistance.

Legacy Article IDa65539