The Manage Event Source screen has several integrated components that present different perspectives of an event source.
- Show Event Source Details
- Add attribute values to an event source
- Remove attribute values for an event source
To view the Manage Event Source screen for an event source:
- Go to ADMIN> Event Sources.
- Select the Manage tab.
- From the Event Sources pane, select an event source from the list and click + .
This workflow shows the end-to-process for modifying, acknowledging, mapping, and configuring event sources, along with viewing and configuring event source alarms and alerts.
What do you want to do?
This is an example of the New Event Source tab:
This table describes event source attribute categories.
The settings in the Manage Event Source tab are a combination of auto-populated and user-entered information. When an event source sends log information to NetWitness Suite, it is added to the list of event sources, and some basic information is auto-populated. At any time after that, users can add or edit details for other event source attributes.
This figure shows an example of the Identification, Properties, and Importance sections.
This figure shows an example of the Zone, Location, and Organization sections.