I want to build a report from the Alerts Tab in NetWitness that runs once a week and returns the Name, Number and Threat Severity of each Alert
I want to build a report from the Alerts Tab in NetWitness that runs once a week and returns the Name, Number and Threat Severity of each Alert
Thank you Sean, Respond Server is added as a data source but Meta just sits at Loading......
So when you're creating the rule, you choose Respond DB, give the rule a name, select "Alert" as the "From", and when you type an "a" into the Select field, it doesn't give you options like this?
If that's the case, I would suggest opening a Support case. Might be something for them to look into.
No it just sits and spins loading. 
If it was me, I'd try removing and then re-adding Respond from the Reporting Engine. Go to this page, check the box next to Respond, click the "-", then add it back. But that's as far as my troubleshooting skills go. If that doesn't work, you'll have to log a case with Support.
Thanks a lot Sean for your replies.
Here is how I built it:
Then create a report and add a rule like the below:
That should get you the report you're looking for. If you have issues selecting "Respond DB" as your Rule Type, make sure that Respond is added as a data source in Admin --> Services --> Reporting Engine --> Config --> Data Sources.