This topic provides high-level tasks to configure RSA NetWitness Platform Event Stream Analysis (ESA) Correlation Rules using the Event Stream Analysis service.
Make sure that you:
- Install the Event Stream Analysis service in your network environment.
- Install and configure one or more Concentrators in your network environment.
The following table shows the high level tasks required to configure ESA Correlation Rules.
The Event Stream Analysis service is configured and you can now add ESA Rules for event processing and alerting. For information on adding ESA Rules, see "Add Rules to the Rule Library" in the Alerting with ESA Correlation Rules User Guide.