Warehouse: Define Multi-valued Metas

Document created by RSA Information Design and Development on Sep 14, 2017Last modified by RSA Information Design and Development on Nov 16, 2017
Version 5Show Document
  • View in full screen mode
 

You can also define an existing meta or a custom meta to be treated as multi-valued meta.

To define multi-valued metas:

Caution: Defining an existing meta to be treated as multi-valued may change the data type of the meta and cause the associated reports to fail.

  1. Create a new file with the filename multivalue-users.xml in the /etc/netwitness/ng directory.
  2. Add the following entries:

    Where NEWMETANAME is the existing meta or a custom meta to be treated as multi-valued meta. 

    Caution: Make sure that you do not add metas that are by default treated as non multi-value.

  1. Restart the stream.
You are here
Table of Contents > Warehouse: Define Multi-valued Metas

Attachments

    Outcomes