Alerting: Configure Warehouse Analytics as an Enrichment Source

Document created by RSA Information Design and Development on Nov 23, 2016Last modified by RSA Information Design and Development on Apr 26, 2017
Version 3Show Document
  • View in full screen mode
  

This topic provides instructions on how to configure RSA Warehouse Analytics as an enrichment source for ESA. Data analysts can leverage RSA Analytics Warehouse data to analyze session and log data.

To configure Warehouse Analytics as an enrichment source:

  1. In the Security Analytics menu, select Alerts > Configure.
  2. Click the Settings tab.

    MetaRefSec.png

  3. In the options panel, select Enrichment Sources.

    The Enrichment Sources panel is displayed.

    16. Enrichment_Sources.png

  4. From the Add drop-down drop-down menu, select Warehouse Analytics.
    13. WarehouseAnalytics_EnrichmentSource.png
  5. Select Enable to enrich alerts with additional data. This is selected by default. If disabled, the alerts will not be enriched with additional data.
  6. In the Name field, type a name to identify or label the Warehouse Analytics configuration.
  7. In the Description field, type a brief description about the Warehouse Analytics configuration.
  8. In the Warehouse Analytics Database URL field, type theMongoDb URL to the Warehouse Analytics database.
  9. In the Username field, type the username to access the MongoDB.
  10. In the Password field, type the password to access the MongoDB.
  11. Click Save.

For more information, see Settings Tab.

You are here
Table of Contents > Add a Data Enrichment Source > Enrichment Sources > Configure Warehouse Analytics as an Enrichment Source

Attachments

    Outcomes