Skip to content
  • There are no suggestions because the search field is empty.

How to remove Discontinued Content in CMS from RSA NetWitness 10.6.1

Issue

How to remove content that is no longer be updated in the Live Content Management System (CMS) which is accessed through the Live component in the NetWitness UI.


Resolution

When content (also known as resources) are marked as discontinued, there will be no further updates in CMS. When searching for content in Live, by default users won’t see this content unless they select the 'Include Discontinued Resources' checkbox.

NetWitness 10.6.1 brings a feature to locate deprecated contents that have been deployed via RSA Live.

The Discontinued Resources will be scanned across Concentrator, Log Decoder, Decoder and these will be displayed in the Live > Configure > Discontinued Resources tab.

User-added


Notes

References:
Discontinued Resources Tab for 10.6.1 :
http://sadocs.emc.com/0_en-us/088_SA106/31_LiveResMgmt/30_Ref/LiveConfVw/tabDscRes

Discontinued Content :
https://community.rsa.com/docs/DOC-57979

Product Details

RSA Product Set: NetWitness Logs & Packets
RSA Product/Service Type: Live Content
RSA Version/Condition: 10.6.1
Platform: CentOS
O/S Version: EL6

Approval Reviewer Queue

RSA NetWitness Suite Approval Queue