This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
Register Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
NetWitness Community Blog
Subscribe to the official NetWitness Community blog for information about new product features, industry insights, best practices, and more.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Parsers, Feeds, and App Rules - Processing Order

BobDredger
Frequent Contributor Frequent Contributor
Frequent Contributor
‎2016-10-03 04:50 PM
(view in My Videos)

Hey NetWitness Users,

 

     This short tutorial video reviews the various types of Filter, Feeds, Parsers, and Application Rules available on the RSA NetWitness Decoder appliances.  Additionally, this tutorial explains the order in which each of these functions are processed.  It is important to be mindful of their processing order to ensure that you are obtaining as much valuable meta as you can. 

 

       I would like to thank Michael Mallon‌ for his assistance in the creation of this tutorial.  Please feel free to leave any questions or feedback in the comments below.

 

Thanks,

RSA Bob

Labels:
© 2022 RSA Security LLC or its affiliates. All rights reserved.