I have a requirement where we want to get the list/details of the event sources sending logs and configured to RSA SA.
2nd requirement is to get the list of event source reported to RSA SA in 24 hours.
RSA SA version is 10.3.3
#10.3.3 #eventsource #report
Please provide me any suggestion.
I would have a go with a newer version of Netwitness.
Version 10.3 is End Of Life at the end of this month (see https://community.rsa.com/docs/DOC-40387#jive_content_id_RSA_SECURITY_ANALYTICS ).
Also, the Event Source monitoring has been greatly improved in 10.6 and you may find something that works out of the box to achieve this.
You can create a report as below.