We use RSA Netwitness 11.3 version and we have a requirement to create a dashboard to display the status of existing incidents created by our SOC Staff. Is this possible? if yes please guide how to create the dashboard.
Yes this is still possible. The process to do so is very similar to creating charts & dashboards for other sources (eg. NWDB).
First, ensure the Reporting Engine is configured with Respond as a data source: Reporting Engine: Configure the Data Sources
Second, this community post sums up the process for getting Respond content from RSA Live: Report on Alerts and Incidents from SA . You can also create rules in RE from scratch if you prefer, or use these Live rules as templates for customization.
From there, use any rules you'd like to create a chart that will be available for addition to your dashboard(s): Reporting: Build Chart View
Hope that helps.Sean
Here is a Youtube video demonstrating Dashboard Creations
Dashboard Creation - YouTube
Thank you Dave!
Retrieving data ...