Host GS: Hosts View

Document created by RSA Information Design and Development on Nov 7, 2017Last modified by RSA Information Design and Development on Jul 9, 2019
Version 15Show Document
  • View in full screen mode
 

You set up and maintain the physical or virtual machine on which NetWitness Platform services run in the Hosts view.

IMPORTANT: For help on resolving errors you receive during version installation and update, seeTroubleshooting Version Installations and Updates. For help on applying version updates to hosts, see Apply Version Updates to a Host.

A service performs a unique function, such as collecting logs or archiving data. Each service runs on a dedicated port and is modeled as a plug-in to enable or disable, according to the function of the host. You must configure the Core services first. 

                                                                                                                                        
CategoryServicesUnencrypted
Non-SSL Port
Encrypted
SSL Port
Notes

Admin Server

Admin
Config
Content
Integration
Investigate
License
Orchestration
Reporting Engine
Respond
Security

N/A
N/A
N/A
N/A
N/A
N/A
N/A
51113
N/A
N/A

N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A

Implemented with the NW Server
Implemented with the NW Server
Implemented with the NW Server
Implemented with the NW Server
Implemented with the NW Server
Implemented with the NW Server
Implemented with the NW Server

Implemented with the NW Server
Implemented with the NW Server

Archiver Archiver
Workbench
50008
50007
56008
56007

 

 

Broker

Broker

5000356003Core Service

Cloud Gateway

Cloud Gateway

N/AN/A

 

Concentrator

Concentrator

5000556005Core Service

Endpoint Broker

Endpoint Broker

N/A

N/A

 

Endpoint Log HybridLog Collector
Log Decoder
Endpoint Server
Concentrator
50001
50002
N/A
50005
56001
56002
N/A
56005
 
ESA PrimaryEntity Behavior Analytics
Contexthub
ESA Correlation
N/A
N/A
N/A
N/A
N/A
50030
 
ESA SecondaryEntity Behavior Analytics
ESA Correlation
N/A
N/A
N/A
N/A
 
Log Collector

Log Collector

5000156001 

Log Decoder

Log Collector
Log Decoder

50001
50002

56001
56002

 

Log HybridLog Collector
Log Decoder
Concentrator

50001
50002
50005

56001
56002
56005

 

Malware Analysis

Malware Analysis
Broker

N/A

60007

 

Network DecoderDecoder5000456004 

Network Hybrid

Concentrator
Decoder

50005

56005

 

UEBA

UEBA

N/A

N/A

 

Warehouse Connector

Warehouse Connector

5002056020

Command line installation

You must configure hosts and services to communicate with the network and each other so they can perform their functions such as storing or capturing data. 

Workflow

This workflow shows the procedures you complete to set up a host, maintain a host, and update the host with new NetWitness Platform versions. Setting up a host is the first task in this workflow. The hosts with core services are set up out-of-the-box. After that, you can set up additional hosts to enhance your NetWitness Platform deployment. The other two tasks, maintaining a host and updating versions for a host, are performed when required and do not have a specific order of completion.


What do you want to do?

For detailed instructions of the following tasks, see Hosts and Services Procedures.

                       
RoleI want to ...
AdministratorSetup up a host.
AdministratorMaintain a host.
AdministratorApply version updates to a host.

* You can perform these tasks in the current view.

Quick Look

The following example shows you how to set up a host.

                     
 1 

Select ADMIN > Hosts.

 2  Select the host you deployed (for example, Event Stream Analysis Primary).
 3  Click (Install icon).
 4  Select the host type to install from the Install Services dialog (for example, ESA Primary). This host type installs the Entity behavior Analytics, Context Hub, and Event Stream Analysis services on this host.

Previous Topic:References
You are here
Table of Contents > References > Hosts View

Attachments

    Outcomes