Customer Experience Improvement Program and Live Feedback

[#1]

The NetWitness Platform Customer Experience Improvement Program (CEIP) is an initiative to continuously improve NetWitness Platform. When a customer enables this program, the CEIP performs analytics about how individual users work in NetWitness Platform without interrupting their workflow or personally identifying users. As part of this program, NetWitness gains insights on your deployment and license usage and analytics on pages viewed and actions taken. NetWitness uses these analytics when making decisions about new features and enhancements to prioritize in upcoming releases. For more information, see "Configure the Customer Experience Improvement Program" in the System Configuration Guide.

Note: RSA Live Feedback is automatically enabled when you create a Live services account.

Product Usage Analytics

Information Collected	Description
User Identifier	A unique identifier for each user of the NetWitness Platform server where CEIP is enabled. No personally identifiable information about the user is collected.
User Role	The NetWitness user role assigned to the user.
License Identifier	A license identifier of the NetWitness instance associates users with an organization. The real identity of the organization is obfuscated.
Page Views	The URL of the page, some browser information (such as language and browser version), and the title of the page.
Click and Focus Events	User interactions with elements on each page viewed. No user entered text or visible data in the view is collected.

NetWitness Live Feedback Analytics

Information Collected	Description
Log Decoder	Total Bytes Captured Capture Rate Capture Dropped Feeds Lua Parser Count App Rules Count Log Parser Count
Decoder	Total Bytes Captured Capture Rate Capture Dropped Feeds Lua Parser Count App Rules Count Network Parser Count
Log Collector	System Version Information System Services Running Since System Service Up-time Total Pipelines Total Active Pipelines Total Custom Pipelines Custom Pipeline Names
ESA Analytics Server	Number of Enabled ESA Rules Threat detection Status (enabled or not)
Malware Service	Total File Bytes Captured
Security Server	System Version Information System Services Running Since System Service Uptime
Admin Server	System Version Information System Services Running Since System Service Uptime
Investigate Server	System Version Information System Services Running Since System Service Uptime
Context-Hub Server	System Version Information System Services Running Since System Service Uptime
Correlation Server	Telemetry stats to be aggregated: Memory Usage CPU Locked Time in Nanoseconds CPU Locked Time in Percentage (%) Esper Rules
NW Insight Sensor	Sensor AWS Region AWS Tenant ID Sensor Device ID
License Usage and Version of Host (Live Feedback)	Product Name Product Version Product Instance Activation Key Details of each component (ID, name, version, instance ID)
Endpoint Server (Additional Feedback Insights)	Usage: Number of agents deployed OS Used: WinHosts LinuxHosts MacHosts Total Hosts
UEBA  Server (Additional Feedback Insights)	User Information: Daily Active Users Count Alert Daily Alerts Created Count Daily Events Processed Count Daily Alert Indicators Created Count Daily Smarts Created Count Daily Smart Indicators Created Count
Concentrator (Additional Feedback Insights)	Version of Concentrator
Decoder (Additional Feedback Insights)	Version of Decoder
ESA Analytics Server (Additional Feedback Insights)	Version of ESA
Log Decoder (Additional Feedback Insights)	Version of Log Decoder
Archiver (Additional Feedback Insights)	Version of Archiver
Other Services (Additional Feedback Insights)	Version of any other deployed services

You are here

Customer Experience Improvement Program and Live Feedback