Skip navigation
All Places > Products > RSA NetWitness Platform > RSA NetWitness Platform Online Documentation > Documents
Log in to create and rate content, and to follow, bookmark, and share content with other members.

ESA Config: Start, Stop, or Restart ESA Service

Document created by RSA Information Design and Development Employee on Sep 13, 2017Last modified by RSA Information Design and Development Employee on Sep 8, 2020
Version 11Show Document
  • View in full screen mode
 

This topic provides instructions to start, stop, or restart the ESA Correlation service from the NetWitness Platform user interface and from the command line. These procedures apply to ESA Correlation Rules.

Start the ESA Service

  1. Log on to NetWitness Platform as admin.
  2. Go to (Admin) > Services.
  3. Select the ESA Correlation service and then select Actions icon > Start.

Stop the ESA Service

  1. Log on to NetWitness Platform as admin.
  2. Go to (Admin) > Services.
  3. Select the ESA Correlation service and then select Actions icon > Stop.

Restart the ESA Service

  1. Log on to NetWitness Platform as admin.
  2. Go to (Admin) > Services.
  3. Select the ESA Correlation service and then select Actions icon > Restart.

Start the ESA Service from the Command Line

  1. Use ssh to connect to the ESA Correlation service and log in as the root user.
  2. Type the following command and press ENTER:
    systemctl start rsa-nw-correlation-server

Stop the ESA Service from the Command Line

  1. Use ssh to connect to the ESA service and log in as the root user.
  2. Type the following command and press ENTER:
    systemctl stop rsa-nw-correlation-server

Restart the ESA Service from the Command Line

  1. Use ssh to connect to the ESA service and log in as the root user.
  2. Type the following command and press ENTER:
    systemctl restart rsa-nw-correlation-server

You are here
Table of Contents > Additional ESA Correlation Rules Procedures > Start, Stop, or Restart ESA Service

Attachments

    Outcomes