Reporting: IPDB Event Source Specification

Document created by RSA Information Design and Development on Sep 14, 2017Last modified by RSA Information Design and Development on Oct 15, 2017
Version 9Show Document
  • View in full screen mode

This topic describes the IPDB event sources that you can specify. You can specify IPDB event sources either using wildcards or by specifying the complete address of the event source. The following table lists the supported IPDB event source specifications.

                             
Event SourceDescription
*:*:*:*:*All domains, sites, nodes, Device Types (Event Source Types) and event source IP addresses. NetWitness Suite supports a single site wildcard for domain and site. 
domain:site:*:*:*All nodes, device types, and event source IP addresses for the specified site.
domain:site:node:*:*All device types and event source IP addresses for the specified node.
domain:site:node:devicetype:*All event source IP addresses for the specified domain, site, node, and device type.
domain:site:node:devicetype:event-source-address1,domain:site:node:devicetype:event-source-address2,...domain:site:node:devicetype:event-source-addressN.Comma-separated list of event sources.
You are here
Table of Contents > Reporting: IPDB Event Source Specification

Attachments

    Outcomes