000035124 - How to reset RSA NetWitness LIVE Subscription and Deployments

Document created by RSA Customer Support Employee on Jun 6, 2017
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000035124
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: SA Live
RSA Version/Condition: 10.6.x,10.5.x
IssueUnder some situations, ex subscription/deployment are messed up or corrupted, A subscriptions/deployments reset cab be performed to clear all the existing LIVE content subscriptions and deployments.
ResolutionFollowing steps can be performed to reset SA LIVE Subscriptions and Deployments.
-SSH to SA server
-CD to /var/lib/netwitness/uax/conf directory
#cd /var/lib/netwitness/uax/conf
-Move out subscriptionBean.cfg and deploymentBean.cfg out of directory to somewhere else.
#mv subscriptionBean.cfg /var/tmp
#mv deploymentBean.cfg /var/tmp
-Restart jettysrv
#stop jettysrv
#start jettysrv
-Verify in SA UI >LIVE>Configure >Subscriptions, Deployments now is empty.
Notes1) Copy of list of Subscription & Deployments if needed.  All subscriptions and deployments list will be cleared after reset.
2) New subscriptionBean.cfg and deploymentBean.cfg will be generated after jettysrv restart.