Context Hub: Configure Live Connect as a Data Source

Document created by RSA Information Design and Development Employee on Sep 8, 2020Last modified by Shree Kulkarni on Sep 8, 2020
Version 2Show Document
  • View in full screen mode

File Reputation Server provides analysts the opportunity to view reputation status of files. By default, File Reputation is enabled in Additional Live Services section.

If Context Hub service is configured, File Reputation Server is automatically added as data source for Context Hub.

Prerequisites

Ensure that:

  • Context Hub is enabled and the service is available in (Admin) > Services view of NetWitness Platform.
  • RSA Live Account is available.

Note: To create a Live Account, see the Step 1. Create Live Account topic in the Live Services Management Guide.

By default, File Reputation is enabled in Additional Live Services section. Before setting up File Reputation data source, make sure that you have signed in to your Live account with your Live Account Credentials and Context Hub is enabled. File Reputation is automatically added as a data source for context hub.

For information about configuring Live Account and Live Services, see the Configure Live Services Settings topic in the System Configuration Guide.

For information about configuring Context Hub service, see the Step 1. Add the Context Hub Service topic in the Context Hub Configuration Guide.

Enable or Disable File Reputation Data Source

To enable or disable Live Connect data source for Context Hub:

  1. Go to   (Admin) > System.
  2. In the left navigation pane, select Live Services.
  3. In the Additional Live Services section, enable File Reputation.


  4. Click Apply.
    File Reputation Server data source is enabled for Context Hub service.
  5. To verify, go to the Data Sources tab and view the available sources.
    File Reputation source must be added to the list of available sources and the Enabled field must be a solid green circle ().
  6. To disable File Reputation data source, disable File Reputation in Additional Live Services panel and click Apply.

    File Reputation data source is disabled for Context Hub service.

Edit File Reputation Server Data Source Settings

To edit File Reputation Server data source for Context Hub:

    1. Select  (Admin) > Services.
      The Services view is displayed.
    2. In the Services panel, select the Context Hub service, and  > View > Config.
      The Services Config view is displayed.
    3. In the Data Sources tab, select the File Reputation Server source and click .

      The Edit Data Source dialog is displayed.

    4. Edit the required fields:
FieldDescription
Max. Concurrent QueriesYou can configure the maximum number of concurrent queries defined by the Context Hub service to be run against the configured data sources. The default value is 25.
  1. To edit the Live Connection and Proxy settings, do the following:

    • To edit the Live Connection settings, see the Live Services Configuration Panel topic in the System Configuration Guide.

    • To edit the proxy settings, see the HTTP Proxy Settings Panel topic in the System Configuration Guide.

  2. Click Test Connection to test the connection between Context Hub and the data source.

  3. Click Save to save the settings.

 

You are here

Table of Contents > Configure File Reputation Server Data Source

Attachments

    Outcomes