This topic tells you how to configure ODBC collection protocol which collects events from event sources that store audit data in a database using the Open Database Connectivity (ODBC) software interface.
The following figure illustrates how you deploy the ODBC Collection Protocol in NetWitness Suite.
Configure an ODBC Event Source
To configure an ODBC event source, you need to configure an event source type, and also choose a DSN template.
Configure a DSN
The following procedure describes how to add a DSN from an existing DSN template. For other procedures related to DSNs, see Configure Data Source Names (DSNs).
Configure a DSN (Data Source Name):
Go to Administration > Services.
In the Services grid, select a Log Collector service.
In the Log Collector Event Sources tab, select ODBC/DSNs from the drop-down menu.
The DSNs panel is displayed with the existing DSNs, if any.
Click + to open the Add DSN dialog.
Fill in the parameters and click Save.
Add an Event Source Type
For details on parameters used in the following procedure, see ODBC Event Source Configuration Parameters.
To configure an ODBC Event Source Type:
- Go to ADMIN> Services.
- Select a Log Collection service.
- Under Actions, select > View > Config to display the Log Collection configuration parameter tabs.
Click the Event Sources tab.
- In the Event Sources tab, select ODBC/Config from the drop-down menu.
The Available Event Source Types dialog is displayed.
Select an event source category (for example mssql and click OK.
The newly added event source type is displayed in the Event Categories panel.
The Add Source dialog is displayed.
- Select a DSN from the drop down list, specify or modify the other parameters as required, and click OK.
Click Test Connection.
The result of the test is displayed in the dialog box. If the test is unsuccessful, edit the DSN information and retry.
- If the test is successful, click OK.
The newly defined DSN is displayed in the Sources panel.