Event Sources View
The Event Source Attributes panel has the following tabs.
To access this panel, go to (Admin) > Event Sources.
Workflow
This workflow shows the end-to-process for modifying, acknowledging, mapping, and configuring event sources, along with viewing and configuring event source alarms and alerts.
What do you want to do?
Role | I want to... | Documentation |
---|---|---|
Administrator |
Create an event source group. |
|
Administrator |
Edit or delete an event source group. |
|
Administrator |
Edit event source attributes. |
Related Topics
Editing or Deleting Event Source Groups
Creating an Event Source and Editing Attributes
Quick Look
The Event Sources view presents the details for Event Sources that are discovered, acknowledged, or mapped by NetWitness.
1 | Discovery Tab
Use this tab to review the event source types that NetWitness has discovered for each address and the system’s confidence of how likely it is that they were identified accurately. |
2 |
Use this tab to create, edit, and delete Event Source Groups. It presents a customizable, searchable view of all of your event sources and groups. |
3 |
Use this tab to manage alert configuration for event sources. |
4 |
Use this tab to see the details of the alarms that have been generated. |
5 |
Use this tab to view or change the behavior for automatic (baseline) alerts. |