|Applies To||RSA Product Set: NetWitness Logs and Network, Security Analytics|
RSA Product/Service Type: Investigator Thick Client
RSA Version/Condition: 10.5, 10.6
|Issue||The RSA NetWitness Investigator 10.6 client and the RSA Security Analytics Investigator 10.5 clients do not require a license key but must be activated before they can be used.|
The instructions on the Welcome screen of the application are outdated and only apply to previous releases and do not effectively activate the SA 10.5 application but they do not generate any errors or warnings and actually indicate that the product is activated.
However, attempting to use the product with local collections will continue to fail until the product is activated.
The user will receive the following message when trying to create a local collection with an inactivated product:
Note: This Windows Client can be used to connect to RSA NetWitness Logs and Network 10.6.x and 11.x
|Resolution||To activate the product, you must connect the application to a remote collection (NetWitness Host running a NetWitness core service such as a Broker or Concentrator) at least once.|
|Notes||You can download the RSA NetWitness investigator client and access its documentation on RSA Link here: https://community.rsa.com/community/products/netwitness/investigator|
Note: You need to complete the form seen when clicking the 'Download Investigator Client' in order to access the download.
17/April/2019 Tested RSA NetWitness Investigator Enterprise Edition v10.6.1.1.696 successfully against concentrator service of 10.6.5.2 and 18.104.22.168.
Development has ceased on this component and so not guaranteed to work on future versions of NetWitness 11.x