000016796 - RSA NetWitness Live Manager nightly email shows no content updated

Document created by RSA Customer Support Employee on Jun 15, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000016796
Applies ToRSA NetWitness NextGen
RSA NetWitness Live Manager
RSA NetWitness Live Manager 2.1.5.2 and above
IssueRSA NetWitness Live Manager nightly email shows no content updated.

RSA NetWitness Live Manager sends email at roughly about 11:30pm every night stating which content has been updated, as shown in the example below. However in some cases resource updates may stop unexpectedly.

-------- Original Message --------

Subject:NetWitness Live Manager Resource Updates
Date:14 Jan 2011 23:30:00 -0500
From:live@netwitness.com
To:live@test.local


No resource updates have been recorded over the last 24 hours.
CauseIn some cases resource updates may not be published. Usually the above message can be ignored. However if resources are not updated after several days, the subscriptions.xml file may need to be refreshed. To do so the following steps must take place.
Resolution

Open Live Manager and select Manage, Subscriptions, Resources. Navigate down the tree and unsubscribe from all content. This includes parsers, feeds, reports, etc etc.

- Remove all tags by going to Manage, Subscriptions, Tags. Click on the Remove Tags button to unsubscribe.

- Stop the Live Manager service.

- In C:\Program Files\NetWitness\NetWitness Live Manager, move subscriptions.xml file to the desktop.

- After moving subscriptions.xml to the desktop, restart the Live Manager service.

- Subscribe to the feeds, parsers, and content you're interested in. This includes any Tags you may have checked off before.

 

After the above steps have been performed, allow about 24-48 hours for the service to generate reports. The output of the report should be similar to this:

-------- Original Message --------

 

Subject:NetWitness Live Manager Resource Updates
Date:15 Jan 2011 23:30:00 -0500
From:live@netwitness.com
To:live@test.local



The following resource(s) have been updated in the last 24 hours:

 

Mined Alexa Parsers [nwsiteclassify.zip] is at version 1.16.
Zeus Domain Tracker [nwzeusdomains.zip] is at version 1.823.
SpyEye Domain Tracker [nwspyeyedomains.zip] is at version 1.172.
SpyEye Tracker [nwspyeyetracker.zip] is at version 1.174.
Malware Domain File List [nwmalwaredomainlistfiles.zip] is at version 1.304.
Malware Domain List [nwmalwaredomainlist.zip] is at version 1.575.
Malware IP List [nwmalwareiplist.zip] is at version 1.578.
Zeus Tracker [nwzeustracker.zip] is at version 1.813.
SANS [nwsans.zip] is at version 1.608.
SRI Attackers [nwsriattacker.zip] is at version 1.157.
Legacy Article IDa58751

Attachments

    Outcomes