This topic provides high-level tasks to configure RSA NetWitness Suite Event Stream Analysis (ESA) Correlation Rules using the Event Stream Analysis service.
Make sure that you:
- Install the Event Stream Analysis service in your network environment.
- Install and configure one or more Concentrators in your network environment.
To configure Event Stream Analysis:
The Event Stream Analysis service is configured and you can now add ESA Rules for event processing and alerting. For information on adding ESA Rules, see "Add Rules to the Rule Library" in the Alerting with ESA Correlation Rules User Guide.