AnsweredAssumed Answered

Create A Feed With Multiple Keys?

Question asked by RSA Admin Employee on Oct 22, 2013
Latest reply on Apr 16, 2014 by RSA Admin

I have reviewed the Netwitness documentation and haven't found a way to do this so I will post it here for any alternate ideas..  Please let me know if you have suggestions.

 

I would like to create a feed with multiple keys.  For instance, say I want to create a feed that matches multiple meta values such as a combination of hostnames, filenames, and directory names and adds an alert to those sessions.

 

Is this possible to do with Netwitness feeds?

Outcomes