000026996 - How to upload log devices update packages manually from RSA Live into RSA Security Analytics

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000026996
Applies ToRSA Security Analytics
RSA Security Analytics Log Collector
RSA Live
IssueHow to upload log devices update packages manually from RSA Live into RSA Security Analytics.
Resolution

If the RSA Security Analytics server doesn't have connection to the Internet, contents can be downloaded from RSA Live from a different machine then uploaded to RSA Security Analytics.


The update package can be downloaded from https://cms.netwitness.com.


The update packages for log devices have the .envision extension. This extension can be changed to .zip then the parser files can be extracted and manually copied to /etc/netwitness/ng/envision/etc/devices/<DeviceType> on the Log Collector device.

NotesYou will need to either reload parsers or restart nwlogdecoder service for changes to take effect.
Legacy Article IDa66624

Attachments

    Outcomes