Skip navigation
All Places > Products > RSA NetWitness Platform > RSA NetWitness Platform Online Documentation > Documents
Log in to create and rate content, and to follow, bookmark, and share content with other members.

Provision Local Collectors and Remote Collectors

Document created by RSA Information Design and Development Employee on Sep 11, 2017Last modified by RSA Information Design and Development Employee on Jan 21, 2021
Version 19Show Document
  • View in full screen mode

The NetWitness Platform server verifies if an appliance has a Log Decoder service. If there is a Log Decoder service, it becomes a Local Collector. If a Log Decoder service is missing, it becomes a Remote Collector. A local Log Collector has an Event Destination and by default goes to the Local Log Decoder service. A Remote Collector does not have an Event Destination. The NetWitness Server identifies a Legacy Windows Collector as a Remote Collector.

To edit a Local Collector or Remote Collector:

  1. Go to (Admin) > Services.
  2. Select a Log Collector service.
  3. In the Services view, select  in the toolbar.

    The Edit Service dialog is displayed.

    Edit Service dialog is displayed.

  4. In the Edit Service dialog, provide the following information.

    ServiceSelect Log Collector as the service type.
    HostSelect a Log Decoder host.
    NameType name you want to assign to the service.
    PortDefault port is 50001 for clear text and 56001 for SSL encrypted.
    SSLSelect SSL if you want NetWitness Platform to communicate with the host using SSL. The security of data transmission is managed by encrypting information and providing authentication with SSL certificates.
    (Optional) UsernameType the username of the Local Collector.
    (Optional) PasswordType the password of the Local Collector.
  5. Click Test Connection to determine if NetWitness Platform  connects to the service.
  6. When the result is successful, click Save.

    If the test is unsuccessful, edit the service information and retry. 

Previous Topic:Basic Implementation
Next Topic:Configure LC/RC
You are here
Table of Contents > Basic Implementation > Provision Local and Remote Collectors