Welcome Serena Central users! CLICK HERE
The migration of the Serena Central community is currently underway. Be sure to read THIS MESSAGE to get your new login set up to access your account.
zarysh
Visitor.

Re: Case Customization

yes, i have updated console, web and manager and restarted all arcsight services. still getting the same error 😞

0 Likes
Reply
zarysh
Visitor.

Re: Case Customization

I dont want to query old cases. I deleted all old cases via console, and when I trying to query the new cases using the new stage values, I am getting this error.

0 Likes
Reply
zarysh
Visitor.

Re: Case Customization

Hi,

I would like point out one more issue with case customization.

In the second tab (stage-2 : Investigation), i have added 9 strings and 2 textareas like shown below:

<tab name="cases.tab.investigation" type="container">
        <tab name="cases.tab.information" type="base">
          <component name="informationTable" type="table" weight="9">
              <parameter name="attackProtocol"      type="string"/>
              <parameter name="attackOs"            type="string"/>
              <parameter name="attackProgram"       type="string"/>
              <parameter name="attackLocationId"    type="string"/>
              <parameter name="attackAgent"         type="string"/>
              <parameter name="attackMechanism"     type="string"/>
              <parameter name="incidentSource1"     type="string"/>
              <parameter name="incidentSource2"     type="string"/>
              <parameter name="sensitivity" type="string"/>
          </component>
          <component name="vulnerabilityEvidence"   type="textarea"/>
          <component name="vulnerabilitySource"     type="textarea"/>
       </tab>
  </tab>


I have renamed all fields as custom values in resource_strings.properties in console, web and manager like
'Threat Name' for attackProtocol, 'Event Source' for attackOs etc.

But when I click on a particular field, the original value is showing at bottom.
For example, when I click on 'Source Host Name', its original value 'Attack Agent' is showing at bottom.
Please refer attached screenshot.

Any solution to not display the original field value?

Thanks,

0 Likes
Reply
kraxner Absent Member.
Absent Member.

Re: Case Customization

Copy the "<ARCSIGHT_CONSOLE_HOME>\current\i18n\console\inlineHelp_strings.properties" file to "<ARCSIGHT_CONSOLE_HOME>\current\i18n\console\inlineHelp_strings_en.properties" and edit the "case.attackAgent=Attack Agent" line.

Here is an example:

console_inlineHelp.png

0 Likes
Reply
zarysh
Visitor.

Re: Case Customization

Wow!! thats worked...thanks a lot @kraxner 🙂

0 Likes
Reply
rahulgkrishna Absent Member.
Absent Member.

Re: Case Customization

Hi,

I have edited the caseui.xml from manager and resource_strings.properties and label_strings.properties files from Console locations and restarted all the Both manager and console. But getting an error(Could not create editor:java.lang.NullPointer Exception) now when i'm trying to open Case editor.

Can anyone help me to get rid of this error?

0 Likes
Reply
kraxner Absent Member.
Absent Member.

Re: Case Customization

That means the syntax is incorrect. Double check your work. My recommendation is to make small changes until you get a hang of it.

0 Likes
Reply
ninja_tea Absent Member.
Absent Member.

Re: Case Customization

If you edited the resource_strings.properties and label_strings.properties files that is probably your error.  You should have created an override file for each (resource_strings_en.properties and label_strings_en.properties) to use for edits.  That java error always shows up when you have issues with your properties files locally compared to what is on the server as well. Not sure the state of all those files (both the en and the regular properties files) so I can't really comment.

Did you create the override files and the above is just a typo?

0 Likes
Reply
rahulgkrishna Absent Member.
Absent Member.

Re: Case Customization

What I have done is I have copied resource_strings.properties and label_strings.properties and renamed as resource_strings_en.properties and label_strings_en.properties.

Then I edited the resource_strings_en.properties and label_strings_en.properties files.

Did i follow the correct method?

0 Likes
Reply
ninja_tea Absent Member.
Absent Member.

Re: Case Customization

The en files only need what you are overriding and not the entire contents.  The java error usually happens to me when I don't have the most current properties files in my console directory compared to what is on the ESM server.

0 Likes
Reply
rahulgkrishna Absent Member.
Absent Member.

Re: Case Customization

The same way I did. What i'm trying to do is to create 4 extra fields under Incident Information header. I have defined this in caseui.xml

Then I have defined the label for these 4 new fields in resource_string_en.properties

havent made any changes in original resource_string.properties

Restarted both Manager and Console.

Still the same error.

0 Likes
Reply
rahulgkrishna Absent Member.
Absent Member.

Re: Case Customization

I can see one i8n folder and resource_strings.properties in Manager folder also. Do I need to replicate the same changes what I have done in console installation folder here also?

0 Likes
Reply
rahulgkrishna Absent Member.
Absent Member.

Re: Case Customization

I can see one i8n folder and resource_strings.properties in Manager folder also. Do I need to replicate the same changes what I have done in console installation folder here also?

0 Likes
Reply
jgervais Absent Member.
Absent Member.

Re: Case Customization

Yes you should make the change on the MAnager, Web Manager, and Console.

0 Likes
Reply
Highlighted
dzuperku1 Absent Member.
Absent Member.

Re: Case Customization

What am I doing wrong here?

I wanted to add another tab under Initial tab for cases.

1. Created a backup of the casesui.xml

Tried to follow the same format as the initial tab for my "Incident Classification" tab

caseuiEdit.jpg

Create the override files for

resource_strings_en.properties

label_strings_en.properties

I added the following to resource_strings_en.properties

extendedcase.attribute.IncidentClassification.label=Abusive Content

extendedcase.attribute.IncidentClassification.shortlabel=Abusive Content

extendedcase.attribute.IncidentClassification.label=Malicious Code

extendedcase.attribute.IncidentClassification.shortlabel=Malicious Code

extendedcase.attribute.IncidentClassification.label=Information Gathering

extendedcase.attribute.IncidentClassification.shortlabel=Information Gathering

extendedcase.attribute.IncidentClassification.label=Intrusion Attempts

extendedcase.attribute.IncidentClassification.shortlabel=Intrusion Attempts

extendedcase.Abusive_Content=Spam,Harassment

extendedcase.Malicious_Code=Virus,Worm,Trojan,Spyware

extendedcase.Information_Gathering=Scanning,Sniffing,Social engineering

extendedcase.Intrusion_Attempts=Exploiting known,vulnerabilities,Login attempts,New attack signature


in label_strings_en.properties I added


cases.tab.incidentClassification

cases.header.incidentClassification=Incident Classification


I stopped the manager, added the files to the manager, and to my local console.

Restarted the manager, and I get the (Could not create editor:java.lang.NullPointer Exception) error message.

If I revert back to the backup files, all is good.

What am I missing?


0 Likes
Reply
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.