This topic provides instructions to add ECAT information into Reports. RSA ECAT Integration provides an overview of ECAT integration into RSA Security Analytics.
You must have configured the ECAT alerts via syslog into a Log Decoder (see Configure ECAT Alerts via Syslog into a Log Decoder in the RSA ECAT Integration Guide).
Perform the following steps to integrate ECAT information into Reports:
In Reporting Engine > View > Config > Sources, add the Concentrator that is consuming data from the Log Decoder as a data source.
ECAT meta is populated in Reporting Engine.
- Run reports by selecting the appropriate meta.