000017847 - How to reload parsers on a Decoder or Log Decoder via the RSA NetWitness UI

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support on Nov 15, 2019
Version 5Show Document
  • View in full screen mode

Article Content

Article Number000017847
Applies ToRSA Product Set: Security Analytics, NetWitness
RSA Product/Service Type: NetWitness UI, Decoder, Log Decoder
RSA Version/Condition: 10.6.x and above
Platform: CentOS
O/S Version: 7
IssueHow to reload parsers on a Decoder or Log Decoder via the RSA Security Analytics UI.
Resolution

To perform a parser reload on a Decoder or Log Decoder in the RSA NetWitness UI, follow the steps below.



  1. In the RSA NetWitness UI, navigate to Administration/Admin > Services.
  2. Select the appropriate device and click on View > Explore.
  3. In the directory tree, navigate to decoder > parsers.
  4. Right-click on the parsers directory and select Properties.
  5. In the drop-down menu in the lower-right side, select reload.
  6. Click on the Send button.

If the operation was successful, the Response Output field will be populated with the following message:  "The parsers have been reloaded"

If this does not solve your issue, please open a case with RSA Technical Support and reference this article so that we may better assist you.

Notes

Below is a screenshot of the parsers reload procedure via the RSA NetWitness UI. 

parser_reload


For instructions on performing parsers reload via the NwConsole utility, refer to the Knowledge Base article: How to reload parsers on an RSA NetWitness decoder or log decoder using NwConsole.
Legacy Article IDa68076

Attachments

    Outcomes