The Live Search view provides the ability to browse the configured Live CMS for resources. Once matching resources are found, you can view details, subscribe to resources, and deploy resources to services and service groups.
This is an example of the Search view.
The Live Search view has a panel for specifying search criteria and a panel that displays matching resources. The Search Criteria panel is collapsible to provide more width for viewing the Matching Resources panel.
Search Criteria Panel
This is an example of the Search Criteria panel.
The following table provides descriptions of the Search Criteria panel features.
Feature | Description |
---|---|
Keyword(s) | Enter a keyword or keywords to browse for resources that have the keyword in the resource name or the resource description. You can use wildcards when you enter a keyword. |
Category | The categories mirror the hierarchical Investigation Model that RSA uses to organize resources. The purpose of the Investigation model is to deliver an accurate path to information security incident response. For more information, see the Investigation Model topic in the RSA Content space on RSA Link. |
Resource Types | Select resources types from the drop-down list to filter resources by type of resource. Possible values are:
Note: Some rules that have been deployed to an earlier version of RSA NetWitness |
Medium | Select one or more mediums from the drop-down list to search for content based on the meta data source. Available values for medium are as follows:
|
Tags | Select meta tags from the drop-down list to browse based on how the meta is tagged. For example, to browse resources for a Log Decoder, select the netwitness for logs tag. Alternatively, you can click a tag in the Matching Resources panel to insert that tag in this field. |
Required Meta Key(s) | Enter a specific meta key; for example, threat.source. Alternatively, you can click a meta key in the Matching Resources panel to insert that tag in this field. |
Generated Meta Value(s) | Enter a generated meta value; for example, netwitness. Alternatively, you can click a generated meta key in the Matching Resources panel to insert that tag in this field. |
Research Created Date | Specify a date range during which resources were created. For example, to browse resources that were created between January 1 and January 4, you select January 1 as the start date and January 4 as the end date. You must enter dates in mm/dd/yyyy format or you click |
Research Modified Date | Specify a date range during which resources were modified. For example, to browse resources that were modified between January 1 and January 4, you select January 1 as the start date and January 4 as the end date. You must enter dates in mm/dd/yyyy format or you click |
Search | Click Search to send the search request to the Live server. More specific search criteria return matching resources more quickly. |
Cancel | Click Cancel to cancel the search in progress. |
Include Discontinued Resources | Check Include Discontinued Resources to include the discontinued resources in the search result. For an up-to-date list of resources that have been discontinued, see the Discontinued Content topic. |
Matching Resources Panel
The Matching Resources panel displays search results based on the selections made in the Search Criteria panel. Results are initially displayed in a grid, but you can switch between two Show Results options: Detailed or Grid.
Detailed Results
In the detailed results, you can click a tag, meta key, or resource meta value to auto fill the Search Criteria panel and pivot the search results.
The following table describes the elements in the detailed results.
Grid Results
In the grid view, you can select one or more resources and use additional options in the toolbar to view the details of a single resource, subscribe to resources, and deploy resources.
The following table describes the elements in the grid results.
See Also
- For more information on Deployment (
), see Find and Deploy Live Resources.
- For more information on Deploying a Package (
), see the Resource Package Deployment Wizard,.