How to find out the EPS on RSA NetWitness Platform Log Decoder

[#1]

Article Number

000001396

Applies To

RSA Product Set: NetWitness Logs & Network
RSA Product/Service Type: Live, Core Appliance
RSA Version/Condition: 10.6.x, 11.x

Issue

How to find out the EPS on RSA NetWitness Log Decoder.

Resolution

The EPS rate is defined in the session.rate parameter on the log decoder appliance.  In order to locate the value, follow the steps below.

For 10.6.x :

1. In the NetWitness UI, navigate to Administration > Devices
2. Select the Log Decoder and click on View > Explore
3. In the directory in the left pane, drill down to database > stats
4. The session.rate parameter and its value will be found in the right pane, which indicates the current EPS rate at that point in time.

For 11.x :
ADMIN > Services > Log Decoder > Explore > database > stats > session.rate
 

The same information can be obtained via the command line using NwConsole by issuing the following command: 

NwConsole -c login localhost:50002 <username> <password> -c /database/stats ls | grep session.rate

If you are unsure of any of the steps above or experience any issues, contact RSA Support and quote this article ID for further assistance.