MapR: Warehouse Overview

Document created by RSA Information Design and Development on Sep 14, 2017Last modified by RSA Information Design and Development on Oct 15, 2017
Version 5Show Document
  • View in full screen mode
  

RSA NetWitness Warehouse provides the capacity to process large amounts of current and long term data through a Hadoop-based distributed computing system that collects, manages, and enables advanced analytics and reporting on NetWitness Suite data. RSA NetWitness Warehouse requires a service called Warehouse Connector to collect metadata and events from Decoder and Log Decoder and write them in Avro format into a Hadoop-based distributed computing system. For more information on the Warehouse Connector, see the "How Warehouse Connector Works" topic in the Warehouse Connector Configuration Guide.

The Warehouse is made up of three or more nodes depending on the organization's analytic, archiving, and resiliency requirements. 

The following figure depicts the architecture of a NetWitness Suite network that implements the RSA NetWitness Warehouse component.

Architecture of NetWitness Siute network that implements the RSA NetWitness Warehouse Component

You are here
Table of Contents > RSA NetWitness Warehouse Overview

Attachments

    Outcomes