Skip to main content
NetWitness Logs and Packets app icon

NetWitness Logs and Packets

This app supports investigative actions to collect log and packet captures from RSA NetWitness Logs and PacketsBuilt by Splunk LLC
soar product badge

Default Version 2.0.3

September 17, 2021

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1, 5.0, 4.10, 4.9

Rating
0
(0)

Log in to rate this app

Support
Splunk Supported
Ranking

#4 in Investigative

This app supports investigative actions to collect log and packet captures from RSA NetWitness Logs and Packets

Supported actions

  • test connectivity: Validate the credentials provided for connectivity
  • get pcap: Download a packet capture file from Netwitness Logs and Packets and add it to the vault
  • get log: Download a log capture file from Netwitness Logs and Packets and add it to the vault
  • upload file: Upload a feed or parser file to a NetWitness Decoder
  • restart device: Restart the configured device