000026299 - How to suppress ' ... non UTF-8 format ...' Warning Messages on RSA NetWitness concentrators

Document created by RSA Customer Support Employee on Jan 10, 2017Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000026299
Applies ToRSA NetWitness NextGen
RSA NetWitness NextGen
RSA NetWitness Concentrator
RSA NetWitness Hybrid
IssueHow to suppress " ... non UTF-8 format ..." Warning Messages on RSA NetWitness concentrators.

After upgrading to, you see the following warning messages in the concentrator.log file:   289559 warning 2011-May-18 07:17:18 CharSet Meta text in non UTF-8 format for token client.  Raw value: 53 6b 79 70 65 99 20 35 2e 30


One of the new features for is UTF-8 character set support for data storage and parsers. When non UTF-8 characters are encountered by the concentrator process, it will generate the warning message in its log file. These warning messages are expected to be removed or moved to debug mode in a future release.

In the meantime, one can suppress these warning messages in the log file as follows:

1. In Administrator, right click on the proper concentrator service and select 'explorer' option, this will open up an 'Explorer' window for the selected concentrator service on the right;

2. On left pane of the 'explorer' window, drill down to  the 'logs' -> 'config' folder and click on 'config' folder, this will bring up the '/logs/config' pane on the right;

3. Add CharSet=0 to the end of the 'log.levels' setting:  info,audit,warning,failure,SDK-Language=info|warning|failure,CharSet=0

Legacy Article IDa58809