RSA NetWitness Logs & Network Core Administration

Document created by Craig Hansen Employee on Feb 3, 2016Last modified by Matthew Bradley on Nov 6, 2018
Version 44Show Document
  • View in full screen mode

Schedule & Register

Schedule Only





In order to register for a class, you need to first create an EMC account 

If you need further assistance, contact us


This course focuses the essential administrative tasks for RSA NetWitness, such as user management, configuration and monitoring.



This Instructor Led Training (ILT) course provides an overview of essential administrative tasks that are performed for RSA NetWitness Logs & Network. Students gain insight into Configuring Devices, Monitoring and User Management within RSA NetWitness Logs& Network and also gain practical experience by performing a series of hands-on labs.



Anyone interested in the administrative topics listed below for RSA NetWitness Logs & Network.



2 days (ILT)


Prerequisite Knowledge/Skills

Students should have completed the following courses (or have equivalent knowledge) prior to taking this training:


Course Objectives

Upon successful completion of this course, participants should be able to:

  • Discover and configure core RSA NetWitness Logs & Network hosts
  • Configure the Reporting Engine and Events Stream Analysis (ESA)
  • Configure Incident Management (IM) and the Archiver
  • Describe the Health and Wellness module
  • Review the REST API
  • Monitor RSA NetWitness Logs & Network hosts and services
  • Create and manage users
  • Describe data privacy


Course Outline

  1. Configuring RSA NetWitness Logs & Network
    • Discovering hosts
    • Configuring the core hosts
    • Configuring NetWitness Logs & Network system settings
    • Configuring the RSA Live service
    • Configuring Incident Management (IM)
    • Configuring the Archiver
    • Configuring ESA
    • Configuring the Reporting Engine
  2. Monitoring (Health and Wellness)
    • Health and Wellness module overview
    • Health and Wellness user interface
    • Configuring a health notification
    • System stats browser
    • Event Source Monitoring
    • Viewing statistics
    • Viewing logs
    • REST API
  3. Managing Users
    • RSA trust model
    • Managing RSA NetWitness Logs & Network users and roles
    • Configuring data privacy
    • Configuring External Authentication using Active Directory
    • Configuring External Authentication using PAM
    • Configuring Data Privacy




Schedule & Register

Schedule Only




In order to register for a class, you need to first create an EMC account

If you need further assistance, contact us