|Applies To||RSA Security Analytics|
RSA Security Analytics Log Collector
|Issue||How to upload log devices update packages manually from RSA Live into RSA Security Analytics.|
If the RSA Security Analytics server doesn't have connection to the Internet, contents can be downloaded from RSA Live from a different machine then uploaded to RSA Security Analytics.
The update package can be downloaded from https://cms.netwitness.com.
The update packages for log devices have the .envision extension. This extension can be changed to .zip then the parser files can be extracted and manually copied to /etc/netwitness/ng/envision/etc/devices/<DeviceType> on the Log Collector device.
|Notes||You will need to either reload parsers or restart nwlogdecoder service for changes to take effect.|
|Legacy Article ID||a66624|