Skip navigation
All Places > Products > RSA NetWitness Platform > RSA NetWitness Platform Online Documentation > Documents
Log in to create and rate content, and to follow, bookmark, and share content with other members.

Sys Maintenance: Filter Event Sources

Document created by RSA Information Design and Development Employee on Sep 14, 2017Last modified by RSA Information Design and Development Employee on Jan 27, 2021
Version 53Show Document
  • View in full screen mode

Note: For NetWitness Platform 11.3.1, this functionality has been deprecated: use the ADMIN > Event Sources > Discovery view to filter event sources in. For details, see the NetWitness Platform Event Source Management Guide.


In ADMIN > Health & Wellness > Event Source Monitoring, you can choose a filter to display the following types of events:

  • Events belonging to a particular event source
  • Events belonging to particular event source types
  • Events collected from a particular log Collector
  • Events list arranged in an order based on the Event Source Type, Log Collector, Log Decoder or Last Event Time

To filter the list of event sources:

  1. Go to ADMIN > Health & Wellness.
  2. Select Event Source Monitoring.

    The Event Source Monitoring tab is displayed.

    Event Source Monitoring tab

  3. Filter the list in one of the following ways:

    • To view the events generated by a particular event source, type the required event source in the Event Source field. Select Regex to enable Regex filter and click Apply. It performs a regular expression search against text and lists out the specified category. This field also supports the use of wildcard characters.

      All events generated by the Event Source specified are displayed.

    • To view events collected from a particular Log Collector, select a Log Collector from the drop-down list and click Apply.

      A list of all events being collected from the specified Log Collector from various event sources is displayed.

Note: You can also choose the following filters:
- To view events belonging to an event source type, select the event source type and click Apply.
- To view events received in a specified time frame, select the required time frame and click Apply. You can further filter the query results to contain only event sources that logs have been received from within the selected time, or query results to contain only event sources that logs have not been received from within the selected time.


You are here
Table of Contents > Health and Wellness > Monitor Health and Wellness using NetWitness Platform UI > Monitor Event Sources > Filter Event Sources