Skip navigation
All Places > Products > RSA NetWitness Platform > RSA NetWitness Platform Online Documentation > Documents
Log in to create and rate content, and to follow, bookmark, and share content with other members.

Reporting Engine: (Optional) Integrate ECAT Information Into Reports

Document created by RSA Information Design and Development on Sep 15, 2017Last modified by RSA Information Design and Development on Feb 25, 2020
Version 13Show Document
  • View in full screen mode
 

You can use the Endpoint data by using the following instructions to add the Endpoint information into Reports. The Endpoint Integration Guide provides an overview of Endpoint integration into RSA NetWitness Platform.

Prerequisites

Make sure that:

  • You have configured the Endpoint alerts via syslog into a Log Decoder. For more information see, "Configure Endpoint Alerts Via Syslog into a Log Decoder" topic in Endpoint Integration Guide).

To integrate Endpoint information into Reports:

  1. In Reporting Engine> View> Config> Sources.
  2. Add the Concentrator that is consuming data from the Log Decoder as a data source.
    Endpoint meta is populated in Reporting Engine.
  3. Run reports by selecting the appropriate meta.

You are here
Table of Contents > Configure the Data Sources > (Optional) Integrate EndPoint Information Into Reports

Attachments

    Outcomes