Where do I get documentation on updating the NetWitness Concentrator XML files?
Where do I get documentation on updating the NetWitness Concentrator XML files?
what are you trying to achieve?
best practices - edit only the index-concentrator-custom.xml and not the index-concentrator.xml (RSA will update the non custom file and wipe your changes if you edit that one)
Hello Eric,
Trying to setup a ThreatConnect feed and one of the steps is to update the index-concentrator-custom.xml
Thank you,
Miguel
From this guide?
https://community.rsa.com/docs/DOC-66221
page 15 shows you the changes that are necessary for the table-map-custom and the index-concentator-custom.xml
you can get access to these files via the admin > service > (concentrator) > Config > files section
save the changes , then restart the service
table-map is on a log decoder service
index-concentrator-* is on the concentrator service
Thanks Eric.
Miguel Lallana,
I've moved your question to the RSA NetWitness Platform space where it will be seen by the product's support engineers, other customers and partners. Please bookmark this page and use it when you have product-specific questions.
Alternatively, from the RSA Customer Support page, click on Ask A Question on the blue navigation bar and choose Ask A Product Related Question. From there, scroll to RSA NetWitness Platform and click Ask A Question. That way your question will appear in the correct space.
Regards,
Erica