How to reload parsers on an RSA NetWitness Platform decoder or log decoder using NwConsole

Issue

How to reload parsers on an RSA NetWitness decoder or log decoder using NwConsole.
How do I perform a parser reload using NwConsole?

Resolution

In order to reload parsers on an RSA NetWitness or RSA Security Analytics decoder or log decoder appliance using the NwConsole interface, follow the steps below.

1. Connect to the appliance via SSH.
2. Issue the command NwConsole to access the NwConsole interface.
3. At the prompt, issue one of the commands below to login to the appropriate service:
        Decoder:  login localhost:50004
        Log Decoder:  login localhost:50002
4. Enter the appropriate password when prompted.
5. Issue the following command to reload the parsers:  parsers reload
6. Type exit to end the NwConsole session.

If you are unsure of any of the above steps or encounter issues, contact RSA Support and quote this article ID for further assistance.

Notes

Internal Comments

UserName:shurtj
5/9/2014 9:56:59 PM - Created Article
Created article for case 486626.

UserName:shurtj
5/20/2014 8:44:29 PM - Changed Fact Statement
Changed "NwConsole" to "RSA NetWitness NwConsole" to follow Primus best practices.

UserName:shurtj
5/21/2014 9:14:13 PM - Updated Title
Added RSA NetWitness to the title.

UserName:shurtj
7/8/2014 2:42:13 PM - Updated Article
Updated the article to include instructions for the Log Decoder as well as for the packet decoder.

UserName:shurtj
8/28/2014 1:09:46 PM - Added Fact
Added the Fact statement RSA Security Analytics Log Decoder.

Product Details

RSA Product Set: Security Analytics, NetWitness Logs & Network
SA Product/Service Type: Decoder, Log Decoder
RSA Version/Condition: 10.x, 11.x
Platform: CentOS
O/S Version: EL6, EL7

Approval Reviewer Queue

RSA NetWitness Suite Approval Queue