Introduced in NetWitness 11.7 is a more comprehensive broker query experience that by default will provide partial results if not all underlying services respond within the default timeout. Alternatively a new workflow exists allowing analysts to exclude specific services aggregated to a broker to avoid waiting for a known less responsive device in their environment.
We are excited for you to explore this new capability!
Please leave any feedback or suggestions on how to make this experience even better. To see what else may be in store for future releases, go to the RSA Ideas portal at RSA Ideas for the RSA NetWitness Platform to see enhancements that have been suggested, vote on them, and submit your own.
The NetWitness Product Team
