|Applies To||RSA Product Set: NetWitness Logs and Packets, Security Analytics|
RSA Product/Service Type: Investigator
RSA Version/Condition: 10.5, 10.6
|Issue||The RSA NetWitness Investigator 10.6 client and the RSA Security Analytics Investigator 10.5 clients do not require a license key but must be activated before they can be used.|
The instructions on the Welcome screen of the application are outdated and only apply to previous releases and do not effectively activate the SA 10.5 application but they do not generate any errors or warnings and actually indicate that the product is activated.
However, attempting to use the product with local collections will continue to fail until the product is activated.
The user will receive the following message when trying to create a local collection with an inactivated product:
“Unable to open local collections until the software is activated.To activate, you must successfully open a Remote Collection first.”
|Resolution||To activate the product you must connect the application to a remote collection on an SA Core Appliance such as a Broker or Concentrator at least one time.|
|Notes||You can download the RSA NetWitness investigator client and access its documentation on RSA Link here: https://community.rsa.com/investigator|