Netwitness send an email automatically when drops the packet occur

[SilasUirisMota]

Hi Guys!

I would like to know if is possible the Netwitness  send an email automatically when drops the packet occur

[ArthurCostigan1 · Accepted solution]

Silas, you can do this with the REST Interface.  There are some good resources about this API in the Community here online.  This is a good place to start.  RSA NetWitness REST API Guide and this will show you some examples of gathering stats via REST 000029306 - Collecting statistics for RSA Security Analytics Decoder via REST API 

[DavidWaugh1]

I've no looked but could you could define a custom policy under Health and Wellness based upon a dropped packet statistic?

There is Capture Packets Dropped, Capture Packets Percent Dropped (current) and Capture Packets Percent Dropped (maximum)

You could perhaps look at Capture Packets Dropped >0 ?