The Live Services Configuration Panel provides the features for setting up your Live account and the CMS server connection.
The Live account is configured two sections, namely RSA Live Status and Download Live Feedback Activity Log. Sign In by entering your Live Account credentials to access the Live Services. To activate your Live account for NetWitness Platform, please contact RSA Customer Care. When you have confirmation that your Live account has been set up, you can configure the CMS server connection as described in Configure Live Services Settings
The Live Services panel provides the user interface for:
- The Live account
- The Live Content update schedule and preferences for notification of updates
- Participation in Live Feedback (Version 11.4.0.x and earlier)
- Sharing Live Content Usage Details
- RSA Live Connect (Beta)
For information on Live Feedback, see Live Feedback Overview
For information on Analyst Behaviors and Data Sharing, see "NetWitness Platform Feedback and Data Sharing" in the Live Services Management Guide.
For information on Live Connect Threat Insights, see Configure Live Services Settings
What do you want to do?
|Role||I want to ...||Show me how|
|Administrator||Configure Live Account, CMS Server Connection|
|Administrator||Upload Data to RSA for Live Feedback||Upload Data to RSA for Live Feedback|
Setup, Verify Live Service Configuration Panel
|Live Services Configuration Panel|
|Administrator||Understand Live Feedback||Live Feedback Overview|
- Live Feedback Overview
- Configure Live Services Settings
- Live Services Management Guide
Live Services Quick Look
You access this view in the Admin > System > Live Services. This figure illustrates the Version 11.4.0.x and earlier panel.
|1||Displays the Live Services Configuration Panel.|
|2||Enter Live Account Credentials with the help of Customer Care.|
|3||Provides updates on Live Content.|
|4||Configures Additional Live Services.|
The Live Configuration panel has three sections: Live Account, Live Content, and Additional Live Services.
Live Account Section
In the Live Account section, you must enter the Live credentials. The information needed to set up the user’s Live account consists of the Username, Password, and Live URL for the RSA Content Management System. This information is provided by Customer Care.
The following table describes the Live Account section features.
The Live URL for the Content Management System. The default value points to the RSA CMS at cms.netwitness.com.
The communications port for Live to send requests to the Content Management System. The default value for this field is 443, which is the communications port on the Content Management System.
Allows the user to communicate via SSL.
The Live account user name as provided by RSA Customer Care.
The Live account user password as provided by RSA Customer Care.
Tests if the connection is successful or not.
Saves and applies the configuration.
The Live Account section provides an option to download and share the Live Feedback historical data by clicking Live Feedback Activity Log.
For more information about how to download historical data, see Upload Data to RSA for Live Feedback
Live Content Section
You can configure the Live Content Synchronization interval and notification at which NetWitness Platform checks for new updates to Live Content:
Use the Check for New Updates field to change the interval. Select an interval from the drop-down list. The default value for this setting is once a day.
The following table describes the Live Content features.
|Check for new updates|
This setting dictates how often NetWitness Platform checks for new updates to Live Subscriptions and synchronizes subscribed resources and tags:
The default value for this setting is once a day.
|Next Check||Displays the time and date of the next scheduled Live synchronization based on the configured interval for checking.|
Email addresses specified here receive messages containing a list of subscribed resources that have been updated in the last 24 hours.
Specifies the format of email messages.
Instead of waiting for the next scheduled resource cycle, this option forces Live to begin immediate synchronization of the subscribed resources in this instance of NetWitness Platform.
|Apply||Applies the changed configuration to the subscription synchronization behavior. The changes become effective immediately. The Next Live synchronization is scheduled for field is updated if the time changed.|
Force Immediate Synchronization
To force immediate synchronization, click Check Now. NetWitness Platform checks for updates in subscribed resources.
Instead of waiting for the next scheduled resource cycle, this option forces Live to begin immediate synchronization of the subscribed resources in this instance of NetWitness Platform. One use for this is to see the immediate impact of a configuration change. For example, a new service has been added, or new resources have been toggled for automatic deployment. The scheduled synchronization could take place hours later if Live Services is set to synchronize a few times a day.
Additional Live Services
The following tables describes the Additional Live Services features.
Lists the types of data RSA is collecting:
|Additional Feedback Insights||Enables NetWitness Platform to send anonymous, technical data about content usage metrics to RSA. This option is enabled by default in Version 11.4.0.x and earlier. In Version 11.4.1 and later, this is enabled when you enable CEIP in the Admin > System > Info panel.|
|RSA Live Connect||Provides more information about Live Connect service and configuring Live Services.|
Enable (Threat Insights)
Enables Threat Insights feature where Live Connect is added as a data source for Context Hub service and the analyst can pull threat intel data during investigation. Ensure that context hub is already configured before enabling this feature.
This option is enabled by default (checked).
|Enable (Analyst Behaviors)||Enables NetWitness Platform to send anonymous, technical data about your environment to RSA. This option is enabled by default (checked).|
Applies the configured changes. The changes become effective immediately.
About Live Feedback Participation
Once you sign up for a Live account, Live Feedback automatically collects relevant information for further improvement and anonymously sends it to RSA. The shared data is protected in accordance with the applicable license agreement. For information on Live Feedback, see Live Feedback Overview. For information, see Configure Live Services Settings
If needed, you can manually download historical usage data and share it with RSA. For information on how to download historical usage data and share it with RSA, see Upload Data to RSA for Live Feedback.