Reporting Engine: Integrate ECAT Information Into Reports

Document created by RSA Information Design and Development on Jul 29, 2016
Version 1Show Document
  • View in full screen mode
 

This topic provides instructions to add ECAT information into Reports. RSA ECAT Integration provides an overview of ECAT integration into RSA Security Analytics.

Prerequisites

You must have configured the ECAT alerts via syslog into a Log Decoder (see Configure ECAT Alerts via Syslog into a Log Decoder in the RSA ECAT Integration Guide).

Perform the following steps to integrate ECAT information into Reports:

  1. In Reporting Engine > View > Config > Sources, add the Concentrator that is consuming data from the Log Decoder as a data source.

    ECAT meta is populated in Reporting Engine.

  2. Run reports by selecting the appropriate meta.
You are here: Configure Reporting Engine > Step 3: Configure Reporting Engine Data Sources > (Optional) Integrate ECAT Information Into Reports

Attachments

    Outcomes