By default, Action meta key defined in table-map.xml for parsing and in index-concentrator.xml for indexing. Verify your device support as per RSA NetWitness Supported Event Sources list. If supported, Please reach support with sample logs of device by exporting them from investigation page in SA GUI.
Hi Jinu,
By default, Action meta key defined in table-map.xml for parsing and in index-concentrator.xml for indexing. Verify your device support as per RSA NetWitness Supported Event Sources list. If supported, Please reach support with sample logs of device by exporting them from investigation page in SA GUI.
Thanks,
Sravan