You manage and configure the hosts and host groups that are available to RSA Security Analytics modules in the Hosts view. Use this view to perform the following tasks.
- Quickly search for and locate a specific host or type of host, such as Decoder, Broker, or Concentrator.
- Add, edit, or delete hosts.
- Check for updates on hosts.
- Update a host to a new version.
- Add, edit, or delete host groups.
- Sort hosts by Name and Host.
- Filter hosts by Name and Host.
- Clear provisions on hosts.
Hosts can be physical or virtual and they can map to one or more of the following services.
- Event Stream Analysis
- Incident Management
- IPDB Extractor
- Log Collector
- Log Decoder
- Malware Analysis
- Reporting Engine
- Warehouse Connector
You can access the services on any host by clicking the button in the Services column for that host.
Select Administration > Hosts in the Security Analytics menu to access the Hosts view from any Security Analytics module.
The Hosts view has two panels:
- Hosts panel
- Groups panel
In the Hosts panel, you can view information about hosts and perform host operations such as adding, deleting, editing, discovering, updating, and rebooting. You can quickly toggle to the Services view to get detailed information on those services. The Hosts panel contains the list of Security Analytics hosts in your Security Analytics deployment and the Hosts Panel Toolbar.
The Groups panel provides a way to create logical groups of hosts. Once hosts are grouped, it is easier to perform operations on multiple hosts by interacting with each host in a group rather than individual hosts from an ungrouped list.
The Groups panel consists of a grid populated with a list of defined host groups and the Groups Panel Toolbar.