Configure Data Source Names (DSNs)
This topic tells you how to create and maintain DSNs for ODBC Collection.
Context
Open Database Connectivity (ODBC) event sources require Data Source Names (DSNs) so you need to define DSNs with their associate value pairs for ODBC event source configuration.
Navigate to the DSN Panel
To add or edit DSNs or DSN templates, first navigate to the appropriate screen.
To navigate to the DSN templates panel:
- Go to (Admin) > Services.
- In the Services grid, select a Log Collector service.
- Click under Actions and select View > Config.
-
In the Log Collector Event Sources tab, select ODBC/DSNs from the drop-down menu.
The DSNs panel is displayed with the DSNs that are added, if any.
From this screen, you can perform the following actions:
- Add a new DSN template
- Add a DSN from an existing template
- Add a DSN by editing an existing DSN template
- Remove a DSN or DSN template
Add a New DSN Template
If none of the predefined DSN templates fit your needs, use this procedure to add a DSN template.
-
From the DSNs panel, click .
The Manage DSN Templates dialog is displayed.
Note: NetWitness provides default templates on the left side panel that you can use while adding a new DSN.
-
Click .
The right panel is activated.
- Specify a template name and click on the right panel to add parameters.
-
Specify the parameters. Click Save.
The new DSN template is added in the Manage DSN Templates list.
Add a DSN from an existing templateAdd a DSN from an existing template
You can select an existing template, and fill in the parameters for your needs.
-
From the DSNs panel, click to open the Add DSN dialog box.
The Add DSN dialog is displayed with existing DSNs, if any
- Choose a DSN Template from the drop down menu and enter a name for the DSN. (You use the name when you set up the ODBC event source type.)
- Fill in the parameters and click Save.
Your DSN is added to the list of DSNs.
Add a New DSN by editing an existing DSN template
You can add a DSN by updating an existing DSN template to fit your needs.
-
From the DSNs panel, click .
The Manage DSN Templates dialog is displayed.
-
Select the existing template that you want to modify.
The right panel is activated, and the default parameters for the selected template are displayed.
- Specify a name in the DSN Name field.
- Add, delete or edit the default parameters.
- Once you have the set of required parameters, click Save, then Close.
- Choose the DSN Template that you updated from the drop down menu and enter a name for the DSN. (You use the name when you set up the ODBC event source type.)
- Fill in the parameters and click Save.
Your DSN is added to the list of DSNs.
Remove a DSN or DSN template
If you no longer use a DSN or a DSN template, you can remove it from the system.
To remove an existing DSN:
- From the DSNs panel, select an existing DSN.
-
Click .
A Warning message appears, asking whether you are sure you want to delete the DSN.
- To delete the DSN, click Yes. Alternatively, to cancel the deletion, click No.
If you confirmed the deletion, the selected DSN is removed from the system.
To remove an existing DSN Template:
-
From the DSNs panel, click .
The Manage DSN Templates dialog is displayed.
- From the DSNs panel, select an existing DSN Template.
-
Click .
A Confirmation message appears, asking whether you are sure you want to delete the DSN Template.
- To delete the DSN Template, click Yes. Alternatively, to cancel the deletion, click No.
If you confirmed the deletion, the selected DSN Template is removed from the system.
Configure device.ip meta for ODBC Data Source
For any ODBC event source, you can choose to have the ODBC collector populate the device.ip meta value with either the event source IP address or the actual source IP on which logs are being collected.
To view or set this parameter:
- Go to ADMIN > Services.
- In the Services grid, select a Log Collector service.
- Click under Actions and select View > Explore.
-
Navigate to logcollection > odbc > eventsources.
There are entries for each ODBC event source that you have configured in NetWitness. For example, for this installation, the only ODBC event source currently configured is MS SQL:
-
Click + next to an event source to expand it and see its DSN entry.
- Click the DSN entry (in this example Test_DSN) to show the parameters.
-
The use_eventsource_address parameter is listed.
- False: actual source IP address is used. This is the default value.
- True: event source IP address is used.
-
Click on the value (in this case False), and type in the new value.
Note: If you type anything other than true or false (case does not matter), you receive an error saying that the value you entered cannot be set.
Any changes you make take effect immediately.