Creating a Dashboard in RSA
We use RSA Netwitness 11.3 version and we have a requirement to create a dashboard to display the status of existing incidents created by our SOC Staff. Is this possible? if yes please guide how to create the dashboard.
- Community Thread
- Forum Thread
- RSA NetWitness
- RSA NetWitness Platform
- to the rsa netwitness platform
Yes this is still possible. The process to do so is very similar to creating charts & dashboards for other sources (eg. NWDB).
First, ensure the Reporting Engine is configured with Respond as a data source: Reporting Engine: Configure the Data Sources
Second, this community post sums up the process for getting Respond content from RSA Live: Report on Alerts and Incidents from SA . You can also create rules in RE from scratch if you prefer, or use these Live rules as templates for customization.
From there, use any rules you'd like to create a chart that will be available for addition to your dashboard(s): Reporting: Build Chart View
Hope that helps.