Resolution | - Log in to the RSA NetWitness UI.
- In the menu in the upper left-hand corner of the UI, navigate to Live > Search.
- In the "Keywords" text box, type the parser name or part of the parser name, and then press "Search."
- Once the results appear, double click the parser name of your choice, as shown in the right side panel of the screenshot below.

- A new window will be opened for the parser containing details about the parser. Click "deploy" to begin deploying the parser on your decoders.
 - Select the resource name and then select "Next."
 - Select the services that you wish to deploy the parser to.
 - Review the information on the review page and click "Deploy.":
 - Watch for the deployment status and then press "Close" once it has deployed successfully.
 - On the decoder, check similar logs in /var/log/messages to make sure that the parser is successfully loaded.
ldecoder NwLogDecoder[14398]: [Parse] [audit] User admin (session 23129, 192.168.2.101:38974) has started uploading file 'rsadlp.envision' ldecoder NwLogDecoder[14398]: [Parse] [audit] User admin (session 23129, 192.168.2.101:38974) has finished uploading file 'rsadlp.envision' ldecoder NwLogDecoder[14398]: [LogParse] [info] File rsadlp content loaded
|