Receiving the error Error 'Access is denied' occurred while saving predicate in Investigate in RSA NetWitness Logs & Network

Issue

When attempting to run a query in the RSA Netwitness UI > Investigate > Navigate, the error "Error 'Access is denied' occurred while saving predicate" occurs.

Resolution

1. For a role that is running into this issue, go into the RSA NetWitness UI and navigate into Admin > Security > Roles. 
2. Select a role that is running into the error "Error 'Access is denied' occurred while saving predicate" while attempting to run a query in Investigate, and edit the permissions. 
3. Under the "investigate-server" tab, make sure that the "investigate-server.predicate.read" permission is checked. 

   
   
    

4. Save the permissions. 
5. Run an Investigation as that role that the permissions were just modified for.
6. Repeat Steps 1-5 for any other role running into this issue. 

Please see "Task 4. Modify the Analyst Role investigate-server Permissions" under the "General" section in the following documentation for further information:  https://community.netwitness.com/t5/netwitness-platform-online/role-permissions/ta-p/669656

Product Details

RSA Product Set: NetWitness Logs & Network
RSA Product/Service Type: NetWitness UI
RSA Version/Condition: 11.x
Platform: CentOS
O/S Version: 7

Summary

When attempting to run a query in the RSA Netwitness UI > Investigate > Navigate, the error Error 'Access is denied' occurred while saving predicate occurs.

Approval Reviewer Queue

Technical approval queue