NetWitness Investigate Events changes in 11.4
Issue
Some users may not prefer how Event Analysis has been renamed to Events and the previous Events tab has been hidden from the Investigate menu.
Resolution
The Event Analysis has been renamed to Events, and the previous Events tab has been hidden from the Investigate menu by default.We want everyone to use the new workflow if possible, but understand that there are still some missing pieces that may require users to re-enable the previous workflow.
If that is required, the setting to accomplish that is under Admin --> System --> Investigation --> Legacy Events --> Enable Legacy Events and click on Apply.
Once enabled, the updated menu becomes: Navigate – Legacy Events – Events.
Besides, all associated links from Navigate and other places should also return similarly to how they were in version 11.3.
Notes
Internal Comments
This information was originally sent out in an email from William Hart, and I am creating this KB for accessibility to the team.7 Feb 2020 -- Mike Nickel
Product Details
RSA Product Set: NetWitness PlatformRSA Product/Service Type: Investigate
RSA Version/Condition: 11.4.x
Summary
This article describes the changes that were made to NetWitness Events in 11.4.
Approval Reviewer Queue
Technical approval queue