Meta key is added to meta group but not shown in investigation in RSA Security Analytics 10.x

Issue

After adding the meta key to the meta group it is not shown in investigation.
This can also happen to the default meta keys.

Cause

Sometimes you have meta key indexed and you can query with it but can't be found in the investigation. This could happen when Meta Key View is set to "Hidden".

Resolution

The Meta Key View needs to be changed to "Auto" or "Open"



The snapshot works for 10.5.x and later, the same will work on earlier versions but tabs' locations could be slightly different.

Product Details

RSA Product Set: Netwitness
RSA Product/Service Type: Core appliances
RSA Version/Condition: 10.X
Platform: CentOS

Summary

Meta key is added to meta group but not shown in investigation.

Approval Reviewer Queue

ASOC Approval Group