000034869 - Scan data import - An error occurred during scan data import in RSA NetWitness Endpoint

Document created by RSA Customer Support Employee on Feb 27, 2017•Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000034869
Applies ToRSA Product Set: NetWitness Endpoint (ECAT)
RSA Version/Condition: 4.1.x, 4.2.x, 4.3.x
Platform: Windows
IssueDuring a standalone scan import where the scan itself performed correctly, attempts to import the scan failed due to the following error message:

Image of the error seen
CauseThis is the result of read-only permissions issues on the file after the file was generated, either manual modification or changes due to transferring the file between locations.
ResolutionThis is the result of file permissions changes to the scanx file or files being imported. To resolve:
  1. Select the scanx file that was created for import and right-click and select Properties:
    • Scan data import properties
  2. In the above example, it was set to Read-only, which prevents the UI from opening the file by the OS.
  3. Remove the read-only flag seen here.
  4. Review the current user of the UI, which is the local system user, and confirm that the user has full access to modify the file under Security.
Once the permissions errors are gone, any other errors such as incorrect password should now display correctly, and the file should be able to be imported.

Attachments

    Outcomes