Hi all,
I inherited a Netwitness infrastructure (now at version 10.3.2) - and part of the desired processing is
downloading new feed CSV files, massaging them and creating new custom feeds. We are using
Python to process this on a Windows server.
After the feeds have been uploaded to the correct Informer directory, the script sends a reload message
to the decoders. This doesn't look like it's working - here's the line of Python code:
urllib.urlopen('http://' + adminID + ':' + adminPW + '@' + ip_address + ':50104/parsers?msg=feed&op=reload')
I've spent some time in a browser going through decoder/parser/ REST API, and not getting anywhere.
I think the "msg=feed" parameter is correct, but I'm not sure about the "op" parameter.
Here is what the GUI is showing for "op".
op - <string, optional, {enum-one:messages|parameters|description|values|roles|extra}> The specific help operation to perform
I can't seem to get a list of permissible values for this.
Any tips for further GUI exploration of REST or permissible values for "op" ?
thanks.
In that case, you could just issue the 'help' call.
http://192.168.99.51:50104/decoder/parsers?msg=feed&op=help
The output:
Bad Request
Parameter op: The value 'help' is invalid, must be one of the values 'notify|reload|remove|delete'
The possible values are listed in the message.
I also do this from NwConsole. I haven't tried it from EVERY node. Much of what I had done via NwConsole, I do now via REST. Much of what I had done via REST I stored in a text file and use as a reference. This was done based on trial and error.
I am attaching that notes file here. It isn't 'documentation'...just a brain dump of what worked for me.
Chris