NetWitness 11.x Missing Default Meta Keys in the Investigate Module

Issue

Default Meta Keys are not displayed in Investigate > Navigate > Meta > Manage Default Meta Keys window.

Workaround

Resolution

To view the default meta keys in the Manage Default Meta Keys window:

To view the default meta keys in the Manage Default Meta Keys window perform the following steps:
Download the H2 DB h2-1.4.196.jar file.
Run the following command:

 curl -Ok https://repo1.maven.org/maven2/com/h2database/h2/1.4.196/h2-1.4.196.jar

 Note: NetWitness version 11.x supports H2 DB h2-1.4.196.jar file to connect with H2 DB in the console.

Copy the file to /root/ directory.
Stop the Jetty service

 systemctl stop jetty

Copy the DB file to temp location

 mkdir /tmp/database
cp /var/netwitness/uax/db/platform.h2.db /tmp/database

Backup the existing platform.h2.db/platform.mv.db file.

 mv /var/netwitness/uax/db/platform.h2.db /var/netwitness/uax/db/platform.h2.db.backup

Connect to H2 DB in SQL console.

 [root@adminserver ~]# java -cp h2-1.4.196.jar org.h2.tools.Shell -url jdbc:h2:file:/tmp/database/platform
sql>

//check the METALANGUAGES table contents.
sql> SELECT * FROM METALANGUAGES;

// truncate METALANGUAGES table, service will automatically insert the contents at start up
sql> TRUNCATE TABLE METALANGUAGES;

//if the above command is executed successfully, run:
sql> SELECT COUNT(*) FROM METALANGUAGES;
//output
COUNT(*)
0
(1 row, 0 ms)

//exit from SQL console
sql> EXIT
Connection closed

Revert the H2 DB file back to the original path.

 mv /tmp/database/platform.h2.db /var/netwitness/uax/db/platform.h2.db

Start the Jetty service and view sa.log

 systemctl start jetty | tailf /var/netwitness/uax/logs/sa.log

Go to Investigate > Navigate > Meta > Manage Default Meta Key and the Default Meta Keys are displayed.

Product Details

RSA Product Set: NetWitness Platform
RSA Product/Service Type: RSA NetWitness Platform
RSA Version/Condition: 11.x
Platform: CentOS
O/S Version: 7

Approval Reviewer Queue

Technical approval queue