Skip navigation

Log in to create and rate content, and to follow, bookmark, and share content with other members.

AnsweredAssumed Answered

Netwitness 11 - Ability to have users who can view logs only, packets only or a mixture?

Question asked by David Waugh on Dec 28, 2017
Latest reply on Jan 3, 2018 by David Waugh

Like • Show 0 Likes0
Comment • 3

One of the nice features we use in Netwitness 10.x is the ability to run a prequery on each user role.

However in Netwitness 11 this feature is not available.

How can I enforce the following role in Netwitness 11

Ability to view logs only
Ability to view packets only
Ability to view logs and packets?

Dec 28, 2017 10:11 PM

Correct Answer

Hi David

You can still do that in NetWitness 11. In the Edit Role screen there is the ability to set a Core Query Prefix:

See the reply in context

No one else had this question

Outcomes

3 Replies

Chris Thomas Dec 28, 2017 10:11 PM
Unmark Correct
Correct Answer
Hi David
You can still do that in NetWitness 11. In the Edit Role screen there is the ability to set a Core Query Prefix:
Like • Show 0 Likes0
Actions
David Waugh Dec 29, 2017 3:12 AM
Mark Correct
Correct Answer
Thanks very much Chris!
Like • Show 0 Likes0
Actions
- David Waugh @ David Waugh on Jan 3, 2018 4:46 AM
  Mark Correct
  Correct Answer
  Hi in the 11.0.0.1 release notes it says
  
  ASOC-42734 If you configured user or role attributes to restrict access to data through query prefix in 10.6.4.x, and upgrade to 11.0, it does not work.
  
  Does the feature actually work in 11.0.0.2 or higher? Can anyone confirm?
  Like • Show 0 Likes0
  Actions

Recommended Content