RSA Analytics Warehouse provides the capacity to process large amounts of current and longer term data through a Hadoop-based distributed computing system that collects, manages, and enables advanced analytics and reporting on Security Analytics data. RSA Analytics Warehouse requires a service called Warehouse Connector to collect metadata and events from Decoder and Log Decoder and write them in Avro format into a Hadoop-based distributed computing system. For more information on the Warehouse Connector, see Warehouse Connector Overview in the Warehouse Connector Configuration Guide.
The Warehouse can be made up of three or more nodes depending on the organization's analytic, archiving, and resiliency requirements.
The following diagram depicts the architecture of a Security Analytics network that implements the RSA Analytics Warehouse component.
This guide provides the configuration procedures only for RSA Analytics Warehouse instances running MapR.