I would like to know if is possible the Netwitness send an email automatically when drops the packet occur
Silas, you can do this with the REST Interface. There are some good resources about this API in the Community here online. This is a good place to start. RSA NetWitness REST API Guide and this will show you some examples of gathering stats via REST 000029306 - Collecting statistics for RSA Security Analytics Decoder via REST API
I've no looked but could you could define a custom policy under Health and Wellness based upon a dropped packet statistic?
There is Capture Packets Dropped, Capture Packets Percent Dropped (current) and Capture Packets Percent Dropped (maximum)
You could perhaps look at Capture Packets Dropped >0 ?
Retrieving data ...