Skip navigation
All Places > Products > RSA NetWitness Platform > RSA NetWitness Platform Online Documentation > Documents
Log in to create and rate content, and to follow, bookmark, and share content with other members.

ESM: Event Sources View

Document created by RSA Information Design and Development on Sep 6, 2017Last modified by RSA Information Design and Development on Feb 11, 2020
Version 17Show Document
  • View in full screen mode
 

The Event Source Attributes panel has the following tabs.

To access this panel, go to Admin > Event Sources.

Workflow

This workflow shows the end-to-process for modifying, acknowledging, mapping, and configuring event sources, along with viewing and configuring event source alarms and alerts.

What do you want to do?

                            
RoleI want to...Documentation

Administrator

Create an event source group.

Creating Event Source Groups

Administrator

Edit or delete an event source group.

Editing or Deleting Event Source Groups

Administrator

Edit event source attributes.

Creating an Event Source and Editing Attributes

Related Topics

Managing Event Source Groups

Creating Event Source Groups

Editing or Deleting Event Source Groups

Creating an Event Source and Editing Attributes

Quick Look

The Event Sources view presents the details for Event Sources that are discovered, acknowledged, or mapped by RSA NetWitness Platform.

                         
1Discovery Tab

Use this tab to review the event source types that NetWitness has discovered for each address and the system’s confidence of how likely it is that they were identified accurately.

2

Manage Tab

Use this tab to create, edit, and delete Event Source Groups. It presents a customizable, searchable view of all of your event sources and groups.

3

Monitoring Policies Tab

Use this tab to manage alert configuration for event sources.

4

Alarms Tab

Use this tab to see the details of the alarms that have been generated.

5

Settings Tab

Use this tab to view or change the behavior for automatic (baseline) alerts.

You are here
Table of Contents > Event Source References > Event Sources View

Attachments

    Outcomes