NW: Setting User Preferences

Document created by RSA Information Design and Development on Sep 18, 2017Last modified by RSA Information Design and Development on Mar 27, 2018
Version 6Show Document
  • View in full screen mode
 

You can view and manage your NetWitness Suite global application preferences from your user profile. Your global preference options vary depending on whether you access them from the Respond view or other views, such as Monitor, Configure, Admin, and Investigate.
You can:

  • Set the application time zone
  • Set the application date and time format *
  • Select your default NetWitness Suite starting location*
  • Select your default Investigate view*
  • Choose a dark or light theme for the application*
  • Change your password (See Changing Your Password for more information.)
  • Enable or disable notifications**
  • Enable or disable context menus**

* You can make this change from the User Preferences dialog accessible from Respond and some Investigate views: Event Analysis, Hosts, and Files.

** You can make this change from the Preferences dialog accessible from most views except Respond and some Investigate views: Event Analysis, Hosts, and Files.

View Your User Preferences (Respond and some Investigate views)

In the upper left corner of the NetWitness Suite browser window, select User Profile icon.
The User Preferences dialog shows your current preferences when accessed through the Respond view and the following Investigate views: Event Analysis, Hosts, and Files.

User Preferences in the Respond and Investigate views

Any selections that you make become effective immediately.

View Your User Preferences (Most views except Respond and some Investigate views)

For most of the following views: Investigate, Monitor, Configure, and Admin: In the upper left corner of the NetWitness Suite browser window, select User Profile icon > Profile.
The Preferences dialog shows your current preferences.
Classic User Preferences dialog

Set the Time Zone and Date and Time Format

You can change the time zone and the format of the date and time for your location.

Note: You can only change the date and time preferences for your location from the Respond and some Investigate views: Event Analysis, Hosts, and Files.

  1. In the User Preferences dialog, select your localization preferences:
    1. Time Zone: Set the time zone to use in the NetWitness Suite.
    2. (Respond and some Investigate views) Date Format: Set the format for the order of the display of the month (MM), day (DD), and year (YYYY). For example, the MM/DD/YYYY format shows the date as 05/11/2017.
    3. (Respond and some Investigate views) Time Format: Set the time as 12-hour or 24-hour time. For example, 2:00 PM in 12-hour time is 14:00 in 24-hour time.

    Changes in the Respond view become effective immediately.

  2. (Most views except Respond and some Investigate views) Click Apply.
    Your preferences become effective immediately.

Note: When Daylight Saving Time (DST) starts or ends, if the selected time zone for the currently logged in user observes DST, the UI automatically updates to reflect the correct time.

Select the Default NetWitness Suite Starting Location

  1. (Respond and some Investigate views) Open the User Preferences dialog.
  2. In the Default Landing Page field, select the opening view that you would like to see when you log in to NetWitness Suite. You can choose Respond, Investigate, Monitor, Configure, and Admin according to your user role. For example, you can choose Respond to go directly to the relevant section of the application for Incident Responders. See Setting up Your Default View by SOC Role to help you select the appropriate default view.
    This selection sets the default view for the entire application. Changes become effective immediately.

Select the Default Investigate View

  1. (Respond and some Investigate views) Open the User Preferences Dialog.
  2. In the Default Investigate View field, select the default landing page when you log in to NetWitness Suite and navigate to Investigate. You can choose Navigate, Events, Event Analysis, Hosts, Files, or Malware Analysis as the default Investigate view. For example, you can choose Events for the default Investigate view to go directly to the Events page to view the events generated for a service. See Setting up Your Default View by SOC Role to help you select the appropriate default view.

Note: After you have applied the change in the drop-down, sometimes it takes few seconds for the changes to come in effect.

Choose the Appearance of NetWitness Suite

This option is only available for NetWitness Suite versions 11.1 and later.

You can choose a dark theme or a light theme for your application, depending on your personal preference. When you change the theme, the Respond view and some Investigate views change to the light or dark theme. Your selection only changes how NetWitness Suite appears to you, not other users.

  1. (Respond and some Investigate views) Open the User Preferences dialog.
  2. Under THEME, select one of the following options:
    • Dark: The dark theme is best for darker environments or when you do not need as much contrast.
    • Light: The light theme is best for lighter environments, when you need more contrast, or when you are projecting the application for others to view. Since some views are not affected by the theme changes, you may want to choose the light theme for a more cohesive viewing experience.

Changes become effective immediately.

The following figure shows the dark theme.
Respond view - Incidents List view showing the dark theme

The following figure shows the light theme.
Respond view - Incidents List view showing the light theme

Enable or Disable System Notifications for Your User Account

(Most views except Respond and some Investigate views) By default, NetWitness Suite system notifications are enabled when a new user account is created. You can disable and enable these notifications at any time.

  1. In the Preferences dialog:
    • To enable notifications for your user account, select the Enable Notifications checkbox.
    • To disable notifications, clear the Enable Notifications checkbox.
  2. Click Apply.
    Your preference becomes effective immediately.

Enable or Disable Context Menus for Your User Account

(Most views except Respond and some Investigate views) By default, context menus are enabled when a new user account is created. Context menus provide additional functions for specific views when you right-click a view.

  1. In the Preferences dialog:
    • To enable context menus for your user account, select the Enable Context Menus checkbox.
    • To disable context menus, clear the Enable Context Menus checkbox.
  2. Click Apply.
    Your preference becomes effective immediately.

Note: Settings available on the Investigate tab in the Preferences dialog are documented in the NetWitness Investigate User Guide.

You are here
Table of Contents > Setting User Preferences

Attachments

    Outcomes