Archiver Overview

This guide provides detailed instructions on how to configure Archiver in your network, additional procedures that are used at other times, and reference materials that describe the user interface for configuring Archiver in your network.

The NetWitness Platform Archiver is an appliance that enables long-term log archiving by indexing and compressing log data and sending it to Archiving storage. The Archiving storage is then optimized for long-term data retention and compliance reporting.

Archiver stores raw logs and log meta from Log Decoders for long-term retention and it uses Direct-Attached Capacity (DAC) for storage.

Note: Raw packet and packet meta are not stored in the Archiver.

The following figure depicts the architecture of a NetWitness Platform network that implements the Archiver.

NetWitness Network Architecture workflow is displayed.