000026717 - Why are there many Service=OTHER sessions in RSA NetWitness Investigator?

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000026717
Applies ToRSA NetWitness NextGen
RSA NetWitness Investigator
IssueWhy are there many Service=OTHER sessions in RSA NetWitness Investigator?
ResolutionThis is mostly caused by sessions being split by the RSA NetWitness Decoder assembler process due to session timeouts or session size limit. Please review the attached pdf document for additional information.
Legacy Article IDa61134

Attachments

    Outcomes