Reporting Engine: Configure Warehouse

Document created by RSA Information Design and Development on Sep 15, 2017Last modified by RSA Information Design and Development on Oct 4, 2017
Version 5Show Document
  • View in full screen mode
 

Configure Warehouse

You can use the Warehouse data to generate Reports by using the following high-level tasks and configuring the NetWitness Suite Warehouse Connector.

Prerequisites

Ensure that you have:

  • Installed the NetWitness Suite Warehouseservice in your network environment.
  • Added a collection on the Warehouse service.

Add Warehouse Connector Service

The Warehouse Connector service is installed on a Reporting Engine.

To add the Warehouse service:

  1. In the main menu, select ADMIN> Services.
  2. In the Services panel, click   > Warehouse Connector.

    The Add Service dialog is displayed.

  3. Provide the following details.

                                       
    FieldDescription
    HostSelect a Reporting Engine host.
    NameType a name for the service.
    PortDefault port is 50007
    SSLSelect SSL if you want NetWitness Suite to communicate with the service using SSL. The security of data transmission is managed by encrypting information and providing authentication with SSL certificates.

    Note: If you select SSL, ensure SSL is enabled in the System Configuration panel.

    UsernameType the Username for the service.
    PasswordType the password for the service.
  4. Click Test Connection to determine if NetWitness Suite connects to the service.
  5. When the result is successful, click Save.

    The added service is now displayed in the services panel.

Note: If the test is unsuccessful, edit the service information and retry.

After you have configured the Reporting Engine, you must add the data sources to Reporting Engine, so that you can extract the data and generate Reports and Alerts. The procedure to add NWDB, IPDB and RESPOND data sources is the same. However, the procedure to add Warehouse as a data source differs.

Add Data Source to Reporting Engine

The following procedure explains how to add NWDB as a data source. You can use the same procedure, if you want to add the IPDB and Respond Data sources to Reporting Engine

Prerequisite

  • Reporting Engine is added and configured in NetWitness Suite
  • Data Sources are added and configured in NetWitness Suite

To add a NWDB data source to Reporting Engine:

  1. Select ADMIN > Services.
  2. In the Services , select Reporting Engine service.
  3. Click  > View.> Config

    The Services Config View of Reporting Engine is displayed.

  4. On the Sources tab, click  > New Service.

    The New Service dialog is displayed.

Add Warehouse as a Data Source to Reporting Engine

Prerequisite

You have to carry out the following Warehouse configurations to be able to use the data from Warehouse data source to generate Reports and Alerts:

  • Add a Warehouse Data Source to Reporting Engine
  • Set Warehouse Data Source as the Default Source

Prerequisite

Make sure that:

  • Hive server is in running state on all the Warehouse nodes. You can use the following command to check the status of the hive server:
    status hive2 (MapR deployments)
    service hive-server2 status (Horton Works deployments)
  • Warehouse Connector is configured to write data to the warehouse deployments.
  • If Kerberos authentication is enabled for HiveServer2, make sure that the keytab file is copied to the /var/netwitness/re-server/rsa/soc/reporting-engine/ directory in the Reporting Engine Host.

    Note: Make sure that the rsasoc user role has read permissions to read the keytab file. For more information, see Configure Data Source Permissions.

    Also, make sure that you update the keytab file location in the Kerberos Keytab File parameter in the Reporting Engine Service Config View. For more information, see General Tab.

You are here
Table of Contents > Reporting Engine: Configure Warehouse

Attachments

    Outcomes