We are trying to integrate a custom application (temenos t24) into RSA NW 11.1 and haven't been really successfully arrived at an optimal integration method. The application writes real time log into an Oracle DB and stores it in an xml format (not native oracle DB format). My assumption is, an odbc based integration method will not work here. Has anyone done t24 integration into RSA SA or NW before? I would like to know what would be the optimal solution here.
Thanks in advance
Hello Saket, The logs are stored within a column in the OracleDB as XMLType. I cant really share the actual sample. But it goes something like this
20180611.00
<row id='20180611.00' xml:space='preserve'><c1>20180303</c1><c2>staffid</c2></row>
We are trying to write a query like something like the below, but keeps failing from NetWitness saying Invalid identifier
select t.recid, NUMCAST (EXTRACTVALUE (t.XMLRECORD,'/row/c1')) as DATE from table name where DATE > 20180717
My question is, is XML DB functions supported by NetWitness? I do not see any online resources pointing towards any answers.
Please help
If you mean to say the logs are in XML format within a column in the OracleDB, you can use XML DB functions to extract them in the ODBC query itself, or handle them in the Log Parser. If you mean to say these raw logs are stored as XMLs, you can use file transfer to transfer it over to NetWitness Log Collector and and write XSLTs to convert them and parse them out. I think there is a solution one way or another, please share some samples/examples.