List of event source in RSA SA
- Community Thread
- Forum Thread
- RSA NetWitness
- RSA NetWitness Platform
I would have a go with a newer version of Netwitness.
Version 10.3 is End Of Life at the end of this month (see https://community.rsa.com/docs/DOC-40387#jive_content_id_RSA_SECURITY_ANALYTICS ).
Also, the Event Source monitoring has been greatly improved in 10.6 and you may find something that works out of the box to achieve this.