You set up and maintain the physical or virtual machine on which NetWitness Suite services run in the Hosts view.
A service performs a unique function, such as collecting logs or archiving data. Each service runs on a dedicated port and is modeled as a plug-in to enable or disable, according to the function of the host. You must configure the following Core services first:
|Decoder||Log Decoder||Context Hub||Reporting Engine|
|Concentrator||Archiver||Log Collector||Warehouse Connector|
|Broker||Event Stream Analysis||Malware Analysis||Workbench|
You must configure hosts and services to communicate with the network and each other so they can perform their functions such as storing or capturing data.
This workflow shows the procedures you complete to set up a host, maintain a host, and update the host with new NetWitness Suite versions. Setting up a host is the first task in this workflow. The hosts with core services are set up out of the box. After that, you can set up additional hosts to enhance your NetWitness Suite deployment. The other two tasks, maintaining a host and updating versions for a host, are performed when required and do not have a specific order of completion.
What do you want to do?
See Hosts and Services Procedures for detailed instructions of the following tasks.
|Role||I want to ...|
|Administrator||Setup up a host.|
|Administrator||Maintain a host.|
|Administrator||Apply version updates to a host.|
The following example shows you how to set up a host.