Live: Find and Deploy Live Resources

Document created by RSA Information Design and Development on Sep 12, 2017Last modified by RSA Information Design and Development on Jul 9, 2019
Version 15Show Document
  • View in full screen mode
 

Administrators can search for resources in the Live Search view, which is also the same as browsing the Live CMS for resources using the Search Criteria panel of the Live Search View.

To find resources:

  1. In the Search Criteria panel, specify search criteria. Enter any or all of these: keyword, category, type of resource, medium, meta keys, meta values, date resource was created, and date resource was modified.

    Search Criteria panel

  2. Click Search.

    The Matching Resources panel displays detailed results.

    Search results in Matching Resources panel

  3. (Optional) To further narrow the results In the Matching Resources panel, click on a tag, meta key, medium or resource meta value in a result.

Deploy Resources in Live

In RSA NetWitness Platform, you can deploy selected resources manually, using the Deployment Wizard, or you can subscribe to a group of resources.

  • When you have results from browsing resources in NetWitness Platform Live, you can deploy resources manually to a service or a service group without subscribing to the resources. To deploy resources, select one or more from the list.
  • Deploying resources manually deploys to services without taking advantage of the powerful resource management capabilities of NetWitness Platform. If you want to receive notification and updates for updated resources and be able to easily remove resources from a service, you must subscribe to resources in the Live Search view and deploy them in the Live Configure View.
  • If you have previously created and saved a resource package, you can deploy the package to services. Please refer to Resource Package Deployment Wizard for instructions on how to create a package.

Caution: For NetWitness Platform 11.3, there is a new Content bundle for Endpoint, which contains approximately 400 application rules. Do not deploy this bundle (or the Endpoint application rules) onto any Log Decoder that is running an earlier version of NetWitness Platform. The rules are only useful for 11.3 and newer, and would have major performance implications if deployed on Log Decoders that cannot process them.

To deploy resources manually:

  1. Go to CONFIGURE > Live Content.
  2. Select a group of resources, or a previously created resource package.

    To select a resource or group of resources:

    1. In the Live Search View, browse Live resources (for example, search for the Log Collector resource Type).
    2. In the Matching Resources panel, select Show Results > Grid.

    3. Select the checkbox to the left of the resources that you want to deploy.

      Matching Resources in Grid view

    4. In the Matching Resources toolbar, click .

      Deployment Wizard dialog is displayed

  3. To select a resource package to deploy:

    1. In the Live Search view - Matching Resources toolbar, select Package > Deploy .

      The Package page of the Resource Package Deployment wizard is displayed.

      Resource package deployment wizard

    2. Click Browse and select a package from your network (for example resourceBundle-FeedsParsersContent.zip).
    3. Click Open.

      At this point, whether you are deploying a package or a group of resources, the Deployment Wizard opens, and the Resources page is displayed.

  4. Click Next.

    The Services page displayed has two tabs, Services and Groups, which provide a list of services and service groups that are configured in the ADMIN > Services view. The columns are a subset of the columns available in the Services view.

    Note: The Live server is "smart" about deploying resources to Services. For example, it does not deploy resources that have a Medium of packets to any Log Decoders. This means that only applicable content resources are deployed to each Service.

  5. Select the services on which you want to deploy the content. You can select any combination of services and service groups.

    • Use the Services tab to select individual services, list of services, and service groups that are configured in the ADMIN > Services view.
    • Use the Groups tab to select groups of services.

    DeploymentServices.png

  6. Click Next.

    The Review page is displayed.

    DeploymentReview.png

    Make sure that you have selected correct resources and the services on which you want to deploy them.

  7. Click Deploy.

    The Deploy page is displayed. The Progress bar turns green when you have successfully deployed the resources to the selected services.

    DeploymentDeploy.png

    If you try to deploy resources and services that are not compatible, NetWitness Platform displays the Errors and Retry buttons, which you can click to review the errors and re-attempt the deployment.

    DeployErrorsRetry2.png

  8. Click Close.

Next steps 

After deploying parsers to Decoders and Log Decoders, you must enable parsers on the individual services. For more information, see the Decoder and Log Decoder Configuration Guide.

You are here
Table of Contents > Required Procedures > Step 3. Find and Deploy Live Resources

Attachments

    Outcomes