Alerting: Services Tab

Document created by RSA Information Design and Development on Sep 12, 2017Last modified by RSA Information Design and Development on Sep 12, 2018
Version 8Show Document
  • View in full screen mode

This topic provides an overview of the CONFIGURE > ESA Rules > Services tab. The Services tab provides details of the ESA services added to NetWitness Platform. 

What do you want to do?

Role I want to ...Show me how
Content Expert

Troubleshoot Services Tab.

Troubleshoot ESA

Content Expert

View deployment Stats for an ESA Service.

View Stats for an ESA Service

Related Topics


The following figure shows the Services tab:
ESA Rules Services Tab

The Services tab has the following sections:

  • ESA Services panel (on the left)
  • General Stats panel (top right)
  • Deployed Rule Stats panel (bottom right)

ESA Services Panel

The ESA Services panel lists the name of each ESA service added to NetWitness Platform.

General Stats Panel

The General Stats panel provides information on the Esper engine, rules, and alerts.

The General Stats panel contains the following sections:

  • Engine Stats 
  • Rule Stats
  • Alert Stats

The following figure shows the General Stats panel.
General Stats Panel

The following table lists and describes the parameters in each section.

Engine StatsEsper VersionEsper version running on the ESA service
TimeTime when the last event was sent to Esper Engine
Events OfferedNumber of events analyzed by the ESA service since the last service start
Offered RateCurrent events offered rate on the ESA service
Rule StatsRules EnabledNumber of rules enabled
Rules DisabledNumber of rules disabled
Events MatchedTotal number of events matched to all rules on the ESA service
Alert StatsEmailNumber of email notifications sent by the ESA service
SNMPNumber of SNMP notifications sent by the ESA service
SyslogNumber of Syslog notifications sent by the ESA service
ScriptNumber of Script notifications sent by the ESA service
StorageTotal number of alerts stored in database
Message BusTotal number of alerts sent to Respond

Deployed Rule Stats Panel

The Deployed Rule Stats panel provides details on the rules that are deployed on the ESA service.

The following figure shows the Deployed Rule Stats panel.

Deployed Rule Stats Panel

The table lists the various parameters in the view and their description.

Enable button Enables a rule that was disabled.
Disable button Disables a rule that was enabled.
Health & WellnessDisplays a snapshot of memory usage when trial rules get disabled
EnableIndicates whether the rule is enabled or disabled.
A green circle icon Enabled icon indicates that the rule is enabled.
A white circle icon Disabled icon indicates that the rule is disabled.
NameName of the ESA rule.
Trial RuleIndicates if the rule is running in trial rule mode.
Last DetectedThe last time alert was triggered for the rule.
Events MatchedThe total number of events that matched the rule.
Average Estimated Memory (last hour)The estimated amount of memory that the rule has been using for the last hour.
Previous Topic:Rule Syntax Dialog
Next Topic:Settings Tab
You are here
Table of Contents > ESA Alert References > Services Tab