Brokers and Concentrators work in conjunction with Decoders and Log Decoders in the NetWitness Suite network. Unlike the two types of Decoders, which capture packets and logs, Concentrators and Brokers aggregate the data captured or aggregated by other services. Brokers aggregate data from configured Concentrators; Concentrators aggregate data from Decoders. A complete overview of the NetWitness Suite network is provided in the NetWitness Suite Getting Started Guide.
Setting up a Broker or Concentrator involves configuring the basic system parameters, the aggregate services, and the aggregation process between a Broker or Concentrator and the aggregate services.
Basic Configuration Checklist
The following checklist provides the sequence for tasks that are required to configure a Broker or Concentrator that has been added to NetWitness Suite in accordance with the Hosts and Services Guide.