Skip to content
  • There are no suggestions because the search field is empty.

Procedure to change password for UEBA service account in NetWitness Logs & Network 11.X

Issue

As per the compliance process of the customer, they need to change the password for UEBA data source. 
Customer needs to have a detailed procedure on how to change the service user account created and have it updated on UEBA.

Tasks

  1. Change the password of the service account created under Broker or Concentrator (data source service).
  2. Update the service account password on UEBA host

Resolution

  1. Change the password of the service account created under Broker or Concentrator (data source service).
    You can achieve this by following this article https://community.rsa.com/docs/DOC-84857
  2. Update the configuration parameters of the UEBA is to use the /opt/rsa/saTools/bin/ueba-server-config 
  1. SSH to the UEBA host
  2. Run the following commands
/opt/rsa/saTools/bin/ueba-server-config -u <user> -p <password> -h
<host> -o <type> -t <startTime> -s <schemas> -v -e <argument>



Notes

User-added
User-added

Product Details

RSA Product Set: NetWitness Logs & Network
RSA Product/Service Type: Core Appliance, UEBA
RSA Version/Condition: 11.X
Platform: CentOS

Approval Reviewer Queue

RSA NetWitness Suite Approval Queue