Why i can't see any index columns ? (Archer/NetWitness integration)
i'm trying to do the integration (Archer/NetWitness), i'm following the guide that is provided in the official site, but i'm stucked in the part that i need to create a custom feed, when i'm in the "define columns" tab i can't proceed because i can't select any column.
The index columns dropdown box don't show anything... somebody can help me ?
- Community Thread
- Forum Thread
- RSA NetWitness
- RSA NetWitness Platform
- sec ops
- security analitcs
Thanks for the answer Josh, I actually found the answer by myself but I am still confused if the CSV file that he receives needs to be written manually or the system do it automatically (i did it manually). in the guide there are no explanations about it... Josh Randall can you help me ?
Can you share the guide/documentation you're following?
I haven't set up an Archer/NW feed integration myself, but I would expect it be populated at least somewhat (if not entirely) automatically by Archer.
I'm using the RSA Archer Integration Guide for RSA NetWitness® Platform 11.3 guide.
I was expecting that he populates the CSV automatically but i can't find anything saying that in this doc or any other guide explaining this.
I think it would be better for this question to be in the Archer space, as the issue appears to be entirely about Archer configuration.
Erica Chalfin - can you assist with moving or copying this question to the Archer space?
I still studying why the CSV file gets empty every time that custom feed run and if he gets populated manually or automatically, but i can't find the answer anywhere in this site, even asking here i don't get answers...