Reporting Engine: (Optional) Integrate ECAT Information Into Reports

Document created by RSA Information Design and Development on Sep 15, 2017Last modified by RSA Information Design and Development on Oct 4, 2017
Version 5Show Document
  • View in full screen mode
  

(Optional) Integrate Endpoint Information Into Reports

You can use the Endpoint data by using the following instructions and adding the Endpoint information into Reports. RSA Endpoint Integration Guide provides an overview of Endpoint integration into RSA NetWitness Suite.

Prerequisites

Make sure that:

  • You have configured the Endpoint alerts via syslog into a Log Decoder. For more information see, "Configure Endpoint Alerts Via Syslog into a Log Decoder" topic in RSA Endpoint Integration Guide).

To integrate Endpoint information into Reports:

  1. In Reporting Engine> View> Config> Sources.
  2. Add the Concentrator that is consuming data from the Log Decoder as a data source.
    Endpoint meta is populated in Reporting Engine.
  3. Run reports by selecting the appropriate meta.
You are here
Table of Contents > Configure Reporting Engine with NWDB > (Optional) Integrate EndPoint Information Into Reports

Attachments

    Outcomes