Reporting Engine: (Optional) Integrate ECAT Information Into Reports

Document created by RSA Information Design and Development Employee on Sep 15, 2017Last modified by RSA Information Design and Development Employee on Sep 8, 2020
Version 16Show Document
  • View in full screen mode

You can use the Endpoint data by using the following instructions to add the Endpoint information into Reports. The Endpoint Integration Guide provides an overview of Endpoint integration into RSA NetWitness Platform.


Make sure that:

  • You have configured the Endpoint alerts via syslog into a Log Decoder. For more information see, "Configure Endpoint Alerts Via Syslog into a Log Decoder" topic in Endpoint Integration Guide).

To integrate Endpoint information into Reports:

  1. In Reporting Engine> View> Config> Sources.
  2. Add the Concentrator that is consuming data from the Log Decoder as a data source.
    Endpoint meta is populated in Reporting Engine.
  3. Run reports by selecting the appropriate meta.

You are here
Table of Contents > Configure the Data Sources > (Optional) Integrate EndPoint Information Into Reports