Jobs are started by various NetWitness Suite modules; for example, the Live module can download CMS resources, the Administration module can upload a feed to a service, and the Investigation module can analyze and reconstruct packets in packet capture files.
In the Administration System view, users in the ADMIN group can manage all NetWitness Suite jobs in the Jobs panel. Other non-administrative users can view their own jobs in the Profile view.
In addition, while working in NetWitness Suite, you can open a quick view of your jobs from the NetWitness Suite toolbar. When a job status has changed, the Jobs icon (
) is flagged with the number of running jobs. Once all jobs are completed, that number disappears.
In the Jobs panel, you can:
- View and sort the jobs
- Pause or resume a job
- Cancel a job
- Delete a job
- Download a job
The structure of the jobs panel is the same in all views.
What do you want to do?
To access the Jobs panel, do one of the following:
-
Go to ADMIN > System, and in the options panel, select Jobs.
-
Go to Profile, and in the options panel, select Jobs.
The Jobs panel organizes information about jobs into a grid. The columns present a job progress bar, the job name, an indication that the job is recurring or not recurring, the NetWitness Suite module that is controlling the job, the owner of the job, the status, any associated message, and a download button to allow downloading of a job's packet capture files or payload files.
To display the Jobs tray, click the Jobs icon 
.
The Jobs tray lists all jobs that you own, recurring and non-recurring, using a subset of the columns available in the Jobs panel. Otherwise the Jobs tray and the Profile View > Jobs panel are the same. In the Administration System view, the Jobs panel lists information about all NetWitness Suite jobs for all users.
The following table describes the options in the Jobs panel.
 | The Resume option applies only to recurring jobs that have been paused. When you resume a paused job, the next execution of the job executes as scheduled. |
 | The Pause option applies only to recurring jobs. When you pause a recurring job that is running, it has no effect on that execution. The next execution (assuming the job is still paused) is skipped. |
 | Cancels a recurring or non-recurring job. You can cancel a job while it is running. If you cancel a recurring job, it cancels that execution of the job. The next time the job is scheduled to run, it executes normally. |
 | Deletes a recurring or non-recurring job from the Jobs panel. When you delete a job, the job is instantly deleted from the Jobs panel. No confirmation dialog is offered. If you delete a recurring job, all future executions are removed as well. |
The following table describes the Jobs tray and Jobs panel features.
| Selection box | Click in this box to select one or more jobs. |
| Progress | Shows the percentage complete for a job. |
| Job Name | Displays the name of the job; for example, Extract Files or Upgrade Service. |
| Recurring | Indicates whether the job is recurring or non-recurring. Yes = recurring, No = non-recurring. |
| Component | Indicates the component in which the job originated; for example, Investigation or Administration. |
| Owner | Indicates the owner of the job. The owner of the job is not included in the default Jobs Tray, because only the current user's jobs are displayed here. The column is available to add. |
| Status | Indicates the status of the job. Common values for status are Paused, Running, Canceled, Failed, Completed, and other status values are possible. |
| Message | Displays additional information about the job; for example, Extracting files or No sessions found. |
| Action | Views job in the Investigation Malware Analysis view, or downloads job files for the job to the default Downloads directory on the local system. Only successfully completed jobs have the View link in the Action column. Only jobs that create a file have the Download link in the Action column. |
| View Your Jobs | Displays jobs in the Profile View > Jobs panel. |
| Scheduled | Indicates the date and time at which the job was scheduled to begin. |
) is flagged with the number of running jobs. Once all jobs are completed, that number disappears.
.
