Step 3 (optional). Importing a meta group for browsing fields filled by Kaspersky CyberTrace Service

This section describes how you can import the MetaGroups.jsn file. This file contains a meta group that you can use to browse only those fields in RSA NetWitness that are filled by Kaspersky CyberTrace Service.

The Kaspersky CyberTrace distribution kit contains the integration/rsa/additional_elements/MetaGroups.jsn file. This file contains fields named kl.%field_name%. If you have not added the CyberTrace fields to RSA NetWitness (namely, to the table-map-custom.xml and index-concentrator-custom.xml files), we recommend that you import the MetaGroups_without_kl_fields.jsn file instead of MetaGroups.jsn.

To import the MetaGroups.jsn file:

  1. On the RSA NetWitness menu, select Investigation > Navigate.
  2. Select Meta > Manage Meta Groups.

    Investigate → Navigate → Meta → Manage Meta Groups menu item in RSA NetWitness.

    Manage Meta Groups command

  3. In the Manage Meta Groups window, click the Import button (Import button in RSA Netwitness.).

    Manage Meta Groups window in RSA NetWitness. Import button.

    Manage Meta Groups window

  4. Select the MetaGroups.jsn file and click the Upload button (Upload button in RSA NetWitness.).
  5. Select the CyberTrace_META_GROUP meta group and click Save and Apply.

    Manage Meta Groups window in RSA NetWitness. Adding a Meta group.

    Adding a meta group

Page top