[Request to Archive] Internal: How to list the available RSA Security Analytics Live resources in XML format
Tasks
The Alfresco system can be used internally by RSA employees to generate a list in XML format of all RSA Live content that is currently available, such as parsers, feeds, application rules, etc.To generate the list, simply access the following URL in a web browser: https://cms.netwitness.com/alfresco/service/search?types=nw%5C:
Depending on the content you wish to view, replace
- Content Type: Application Rules
- URL Option: appRule
- Content Type: Correlation Rules
- URL Option: correlationRule
- Content Type: Custom Actions
- URL Option: customAction
- Content Type: ESA Alerts
- URL Option: esaAlert
- Content Type: ESA Rules
- URL Option: esaRule
- Content Type: Feeds
- URL Option: feed
- Content Type: Informer Alerts
- URL Option: informerAlert
- Content Type: Informer Charts
- URL Option: informerChart
- Content Type: Informer Reports
- URL Option: informerReport
- Content Type: Informer Rules
- URL Option: informerRule
- Content Type: Log Device
- URL Option: logDevice
- Content Type: Malware Analysis Rules
- URL Option: malwareRule
- Content Type: Network Rules
- URL Option: netRule
- Content Type: Parsers
- URL Option: parser
- Content Type: Reporting Engine Lists
- URL Option: reList
- Content Type: Reporting Engine Reports
- URL Option: reReport
- Content Type: Reporting Engine Rules
- URL Option: reRule
When prompted for a username and password, enter valid Live credentials to view the resources.
Notes
Below is a screenshot of the RSA Live feed resources in XML format that is displayed using the procedure in this article.
Internal Comments
Jeff Shurtliff -- 7/7/2015This article is intended to be for internal use only.
Product Details
RSA Product Set: Security Analytics, NetWitness NextGenRSA Product/Service Type: Live, Core Appliance, Event Stream Analysis (ESA), Malware Analysis, Reporting Engine, Informer
Summary
How to use Alfresco to export a list in XML format of all Live content that is currently available.
Approval Reviewer Queue
Technical approval queue