Netflow Collection: Step 2. Configure Event Sources to Send Events

Document created by RSA Information Design and Development on Oct 23, 2017
Version 1Show Document
  • View in full screen mode

Download and configure the rsaflow or cef parser from Live.

Verify that you downloaded the rsaflow or cef parser from LIVE to the Log Decoder and enabled it.


  1. In the Security Analytics menu, go to Administration > Services.
  2. Select a Log Decoder service and select ic-actns.png > View > Config.
  3. In the General tab, under the Service Parsers Configuration panel, verify that the rsaflow option is checked.
You are here
Table of Contents > Netflow Collection Configuration Guide > Procedures > Step 2. Configure Netflow Event Sources to Send Events to Security Analytics