Skip to content
  • There are no suggestions because the search field is empty.

Manage Users with Roles and Permissions

Manage Users with Roles and PermissionsManage Users with Roles and Permissions

A set of end-to-end procedures for managing users in NetWitness is described in this section. These steps explain how to add a user in NetWitness and then how to control what the user can do.

Manage Users WorkflowManage Users Workflow

This figure shows the high-level workflow for managing the users in NetWitness.

netwitness_manuserrolperm-wf.png

First, review the preconfigured NetWitness roles such as Administrators, Respond Administrators, Data Privacy Officers, SOC managers, Operators, Malware analysts, Analysts, and UEBA analysts. Determine if you need to make any adjustments to these roles for your environment. You can add new custom roles and assign permissions to each role. After you define the roles, you can verify the query and session attributes that are set for each role. Then you can set up the users by adding new users and assigning roles to them. You can also map external group users to the NetWitness roles.

These are the procedures for setting up and managing users:

  • Column 1:
  • Column 2:


ka0Rm0000004LqfIAE,WDDCS Tool Commands Reference,WDDCS-Tool-Commands-Reference,,,,Documentation,

WDDCS Tool


WDDCS is a command line utility for capturing discrete host and enclosure data for analysis and troubleshooting and performing common management functions such as upgrading firmware and configuring drive zones.

Installation


The WDDCS tool and its dependencies are already available on the NetWitness devices, so no additional installation steps are required.

  • When a user runs the wddcs command for the first time, they must accept the End User License Agreement (EULA).
  • wddcs / wddcs help: displays the version of the tool and the help menu.

wddcs commands


The wddcs help command is used to print the usage text (command syntax, operations, arguments, and explanations) for the following WDDCS Tool commands:

Some of the commonly used wddcs commands are listed below, and more detailed information on these commands can be found in the User Guide - WDDCS Tool available in the following location Ultrastar Data60 Hybrid Storage Platform.

wddcs show

The wddcs show command scans all enclosures and displays the following information:

  • Product description
  • Serial number
  • Firmware revision
  • Product name

wddcs

wddcs getlog

  • The wddcs help getlog command provides various options used for extracting specific logs and their associated details.

wddcs

  • The wddcs getlog all command collects all logs and compiles them into a single tar file (.tgz). The file is saved in the /tmp directory with the following name format: wddcs_ _date_timestamp.tgz .

wddcs

wddcs iom

The wddcs iom command displays IOM status.

wddcs

wddcs rcli

  • The wddcs rcli help command provides a list a commands that can be run on a target device.
    For example, wddcs /dev/sg51 rcli help

wddcs 

  • The wddcs rcli “show drives” command displays drives information.
    For example, wddcs /dev/sg51 rcli "show drives"

wddcs 

  • The wddcs rcli “show vpd” command is used to display vital product data for a single SEP device within an enclosure that supports RCLI commands.
    For example, wddcs /dev/sg51 rcli "show vpd"

wddcs

  • The wddcs rcli “show enc” command displays the enclosure information for a single SEP device.
    For example, wddcs /dev/sg51 rcli "show enc

wddcs

  • The wddcs rcli “show cable” command displays the cable information.

wddc 

wddcs diag

  • The wddcs diag command is used to display, set, or clear diagnostic page information for the feature or component specified in the command option.

wddcs

  • The wddcs diag “show-enc” command is used to display the enclosure status code and ident bit value for the enclosure
    For example, wddcs /dev/sg51 diag "show-enc"

wddcs 

wddcs fw


The wddcs fw status command is used to check the firmware download status.
For example, wddcs /dev/sg51 fw status

wddcs 

wddcs zone

  • The wddcs zone command provide various commands to be used to configure the zone based on the Ultrastar type.

wddcs 

  • The wddcs zone status command is used to display the zone configuration status of a single IOM/SEP device.

wddcs