Configure ODBC Event Sources

Document created by RSA Information Design and Development on Sep 11, 2017Last modified by RSA Information Design and Development on Oct 12, 2017
Version 7Show Document
  • View in full screen mode

This topic tells you how to configure ODBC collection protocol which collects events from event sources that store audit data in a database using the Open Database Connectivity (ODBC) software interface.

Deployment Scenario

The following figure illustrates how you deploy the ODBC Collection Protocol in NetWitness Suite.

Figure shows to deploy the ODBC protocol in NetWitness.

Configure an ODBC Event Source

To configure an ODBC event source, you need to configure an event source type, and also choose a DSN template.

Configure a DSN

The following procedure describes how to add a DSN from an existing DSN template. For other procedures related to DSNs, see Configure Data Source Names (DSNs).

Configure a DSN (Data Source Name):

  1. Go to Administration > Services.

  2. In the Services grid, select a Log Collector service.

  3. Click under Actions and select View > Config.

  4. In the Log Collector Event Sources tab, select ODBC/DSNs from the drop-down menu.

  5. The DSNs panel is displayed with the existing DSNs, if any.

  6. Click + to open the Add DSN dialog.

  7. Choose a DSN Template from the drop down menu and enter a name for the DSN. (You use the name when you set up the ODBC event source type.) If required, click ManageDSNTemplates.png to add or delete DSN templates.

  8. Fill in the parameters and click Save.

Add an Event Source Type

To configure an ODBC Event Source Type:

  1. Go to ADMIN> Services .
  2. Select a Log Collection service.
  3. Under Actions, select > View > Config to display the Log Collection configuration parameter tabs.
  4. Click the Event Sources tab.

    Event Sources tab is displayed.

  1. In the Event Sources tab, select ODBC/Config from the drop-down menu.
  2. In the Event Categories panel toolbar, click .

    The Available Event Source Types dialog is displayed.

    Available Event Source Types dialog is displayed.

  3. Select an event source category (for example mssql and click OK.

    The newly added event source type is displayed in the Event Categories panel.

  4. Select the new type in the Event Categories panel and click  in the Sources toolbar.

    The Add Source dialog is displayed.

    Add Source dialog is displayed.

  5. Select a DSN from the drop down list, specify or modify the other parameters as required, and click OK.
  6. Click Test Connection.

    The result of the test is displayed in the dialog box. If the test is unsuccessful, edit the DSN information and retry.

    Note: Log Collectortakes approximately 60 seconds to return the test results. If it exceeds the time limit, the test times out and the NetWitness Suite server displays an error message.

  7. If the test is successful, click OK.

The newly defined DSN is displayed in the Sources panel.

ODBC Collection Parameters

The following table provides descriptions of the ODBC Collection source parameters.


Next Topic:Configure DSNs
You are here
Table of Contents > Collection Protocols > ODBC > Configure ODBC Event Sources