Title: Logs are not published to sms.log. Problem: In some cases, the incident rules on the UI are not in the correct order, and duplicates are displayed. Title: Incident rules are not displayed correctly. Workaround: You must retain the Orchestrator-TC App server name as threatconnect. Problem: When the Orchestrator-TC App server name is changed from the 11default name which is threatconnect, the connection to the Respond Server fails. Title: NWO-TC connection is lost when the server name is changed. Problem: NetWitness Service Topology Tab is not displayed correctly in the config page when the user is in non-ember pages like Live Content/ ESA rules/ Subscriptions/ Custom Feeds. Title: Service Topology Tab is not displayed correctly. logstash-plugin install file:////opt/netwitness/logstash/logstash-codec-netwitness-offline-1.0.0.zip logstash-plugin install file:////opt/netwitness/logstash/logstash-input-netwitness_export_connector-offline-2.1.0.zip bin/logstash-plugin remove logstash-input-netwitness_export_connector Install the new plugin after the upgrade. This occurs only if you have Logstash installed as part of the NetWitness installation on the Log Collector service as the Export Connector plugin will be automatically installed during the patch upgrade.ġ. Problem:When you upgrade from 11.6 to 11.6.1.3 or 11.7 to 11.7.0.1 for the Log4j fix and have export-connector and netwitness-codec plugin in your deployment, then it is not installed correctly. Title:Export Connector and netwitness codec upgrade fails when you upgrade from 11.6 to 11.6.1.3 or 11.7 to 11.7.0.1to fix the Log4j vulnerability You must reset the admin credentials to their default credentials. Problem: Publishing policy fails as the default admin password to authenticate core service is changed. Title: Unable to publish the configuration policy on Core Services due to authentication error. You can sort this list by clicking on the column headings.

To find out if any known issue is fixed, refer to the Fixed Issues section in the Release Notes for the appropriate release.

Xmx file decryption tool