Integrating NW Endpoint 4.4.0.2 or Later with NW Platform

You can configure the Endpoint Metadata for the NetWitness Endpoint 4.4.0.2 by integrating the Meta Integrator service in the NetWitness Endpoint 4.4.0.2 directly to a Log Decoder. You can view the Endpoint metadata in the Investigate > Navigate and Events views. This integration includes the following steps:

Enable Metadata Forwarding

To enable the Metadata Integrator service for the selected NetWitness Endpoint 4.4.0.2 agents, run the following command:

ConsoleServer.exe /nw-investigate enable

Enable Machines to Forward Metadata

After you enable the Metadata Forwarding using any one of the above options, perform the following to enable the machines to forward metadata to the Log Decoder.

  1. Open the NetWitness Endpoint 4.4.0.2 user interface.

  2. Click Machines from the left panel. The list of available machines are displayed.

    netwitness_ep_ecat1_939x694.png

  3. Select machines for which you want to forward metadata to the NetWitness Endpoint Server.

  4. Right-click and select the NetWitness Investigate option.

    The Change NetWitness Investigate Status dialog is displayed.

    netwitness_ep_ecat2_927x695.png

  5. Select the Enable NetWitness Investigate option.
  6. Click Apply.
  7. To verify if the Enable NetWitness Investigate option is enabled, repeat step 4.