Live Services Configuration Panel

Live Services Configuration Panel introduces the features for setting up your Live account and the CMS server connection.

Live Account consists of two sections, namely RSA Live Status and Download Live Feedback Activity Log. Sign In by entering your Live Account credentials to access the Live Services. To activate your Live account for NetWitness, contact NetWitness Customer Support. When you have confirmation that your Live account has been set up, you can configure the CMS server connection as described in Configure Live Services Settings

The Live Services panel provides the user interface for:

  • The Live account
  • The Live Content update schedule and preferences for notification of updates
  • Participation in Live Feedback
  • Sharing Live Content Usage Details

For information on Live Feedback, see Live Feedback Overview

For information on Analyst Behaviors and Data Sharing, see the "NetWitness Feedback and Data Sharing topic in the Live Services Management Guide.

Note: If you are logged into an Analyst UI, you can only view but cannot enable, disable, edit, or configure NetWitness Live.

Workflow

netwitness_livewrkflw_1080x338.png

What do you want to do?

Role I want to ... Show me how
Administrator Configure Live Account, CMS Server Connection

Configure the Email Settings as Notification Server

Administrator Upload Data to NetWitness for Live Feedback Upload Data to RSA for Live Feedback

Administrator

Setup, Verify Live Service Configuration Panel

Live Services Configuration Panel
Administrator Overview On Live Feedback Live Feedback Overview

Related Topics

Live Services Quick Look

You access this view in the netwitness_adminicon_25x22.png (Admin) > System > Live Services.

122_liveserv116_1122.png

1 Displays the Live Services Configuration Panel.
2 Enter Live Account Credentials with the help of Customer Care.
3 Provides updates on Live Content.
4

Additional Live Services provide Live feedback.

Note: If you are not signed in with your Live Account credentials, a masked screen is displayed as shown here.

122_LiveAccount_1122.PNG

The Live Configuration panel has three sections: Live Account, Live Content, and Additional Live Services.

Live Account Section

In the Live Account section, you must enter the Live credentials. The information needed to set up the user’s Live account consists of the Username, Password, and Live URL for the NetWitness Content Management System. This information is provided by Customer Care.

The following table describes the Live Account section features.

Feature Description

Host

The Live URL for the Content Management System. The default value points to the NetWitness CMS at cms.netwitness.com.

Port

The communications port for Live to send requests to the Content Management System. The default value for this field is 443, which is the communications port on the Content Management System.

SSL

Allows the user to communicate via SSL.

Username

The Live account user name as provided by NetWitness Customer Support.

Password

The Live account user password as provided by NetWitness Customer Support.

Test connection

Tests if the connection is successful or not.

Apply

Saves and applies the configuration.

The Live Account section provides an option to download and share the Live Feedback historical data by clicking Live Feedback Activity Log.

For more information about how to download historical data, see Upload Data to RSA for Live Feedback

Live Content Section

You can configure the Live Content Synchronization interval and notification at which NetWitness checks for new updates to Live Content:

Use the Check for New Updates field to change the interval. Select an interval from the drop-down list. The default value for this setting is once a day.

netwitness_110_subscriptionsettings.png

The following table describes the Live Content features.

Feature Description
Check for new updates

This setting dictates how often NetWitness checks for new updates to Live Subscriptions and synchronizes subscribed resources and tags:

  • once a day

  • twice a day

  • four times a day

  • every hour

  • every other hour

  • every half hour

The default value for this setting is once a day.

Next Check Displays the time and date of the next scheduled Live synchronization based on the configured interval for checking.
Email Addresses

Email addresses specified here receive messages containing a list of subscribed resources that have been updated in the last 24 hours.

HTML format

Specifies the format of email messages.

  • Set = HTML
  • Cleared = text
Check Now

Instead of waiting for the next scheduled resource cycle, this option forces Live to begin immediate synchronization of the subscribed resources in this instance of NetWitness.

Caution: Use this feature with caution because synchronization can cause a parser reload if a Lua Parser or Flex Parser is deployed in the update cycle. This is acceptable once or twice a day, but a number of back-to-back parser reloads can cause packet loss at the Decoder. If this is the initial setup and you haven’t configured Live resource subscriptions, do not Synchronize Now. Wait until you have configured subscriptions.

Apply Applies the changed configuration to the subscription synchronization behavior. The changes become effective immediately. The Next Live synchronization is scheduled for field is updated if the time changed.

Force Immediate Synchronization

To force immediate synchronization, click Check Now. NetWitness checks for updates in subscribed resources.

Instead of waiting for the next scheduled resource cycle, this option forces Live to begin immediate synchronization of the subscribed resources in this instance of NetWitness. One use for this is to see the immediate impact of a configuration change. For example, a new service has been added, or new resources have been toggled for automatic deployment. The scheduled synchronization could take place hours later if Live Services is set to synchronize a few times a day.

Caution: Synchronization can cause a parser reload if a Flex Parser is deployed in the update cycle. This is acceptable once or twice a day, but a number of back-to-back parser reloads can cause packet loss at the Decoder. If this is the initial setup and you haven’t configured Live resource subscriptions, do not Synchronize Now. Wait until you have configured subscriptions.

Additional Live ServicesAdditional Live Services
netwitness_live_service_2.png

Note: Click on Learn more to know more about the data NetWitness is collecting. For more information, see Live Feedback Overview

The following tables describes the Additional Live Services features.

Feature Description
Live Feedback

Lists the types of data NetWitness is collecting:

  • Product Name

  • Product Version

  • Product Instance

  • Activation Key

  • Details of each Component such as:

    • ID

    • Name

    • Version

    • Instance ID

  • Metrics for each component

Additional Feedback Insights Enables NetWitness to send anonymous, technical data about the content usage metrics to NetWitness. This option is enabled by default.

About Live Feedback Participation

Once you sign up for a Live account, Live Feedback automatically collects relevant information for further improvement and anonymously sends it to RSA. The shared data is protected in accordance with the applicable license agreement. For information on Live Feedback, see Live Feedback Overview. For information, see Configure Live Services Settings

If needed, you can manually download historical usage data and share it with RSA. For information on how to download historical usage data and share it with RSA, see Upload Data to RSA for Live Feedback.