AnsweredAssumed Answered

9.8 Netwitness Packet Decoder /sys node in REST API - fileEdit msg

Question asked by RSA Admin Employee on Sep 15, 2014
Latest reply on Sep 16, 2014 by RSA Admin



I'm having a heckuva time trying to get the NW REST API accept a config file update via the REST API.  The /sys node has a msg called "fileEdit" that appears to mimic is used in the SDK for these operations.  Looking at a pcap from the same function in the 9.8 Admin Client, the op "put" is used along with the appropriate filename, followed by the text you want the file to contain.  That's the most I can glean from the pcap and since it's the SDK instead of the REST API, things are obviously a bit different...


I know that when uploading a feed or parser, that node (parser/upload) takes POST data for the file contents.  I have that working just fine.  This /sys mnode does not accept POST data.  It does not accept any of the multitude of ways I've tried to send it the file contents... has anyone managed to make this work?  Is there another way to overwrite a config file via the REST API (index-decoder.xml, as an example)?