|Applies To||RSA NetWitness Spectrum|
RSA NetWitness Spectrum 126.96.36.199
RSA NetWitness Spectrum 188.8.131.52
|Issue||Error message "'File(s) has been purged and is no longer available from the repository" on an RSA NetWitness Spectrum appliance.|
Within a Spectrum event if you attempt to download a file, the following message is dispalyed: File(s) has been purged and is no longer available from the repository.
There are two reasons that this issue would occur:
Spectrum keeps the files for about 60 days before being purged. Since your event just occurred, the problem appears to be from a Spectrum limitation. When Spectrum stores the files, it uses the hash in the path. For example, a file named file.pdf with a hash of 0a292ed4ce2cb1ee42bc20fd3ffb30b8 can be found in the following location:
If another file, say named anotherfile.pdf, is introduced into Spectrum and has the same hash, it would not be stored because the same file already exists (just named differently).
So when a user requests to download anotherfile.pdf, the error occurs.
Right-click the ?download file? link and copy the link address. It should look something like this: actions391820599.downloadFromRepository('0a292ed4ce2cb1ee42bc20fd3ffb30b8', true, '391820599')
Use the hash to look for a file in the repository, as shown below.
|Legacy Article ID||a60812|