Policies Tab

The netwitness_configure.png (CONFIGURE) > Policies view contains two tabs: Configuration and Content.

Below is an example of the Content > Policies tab:

netwitness_121_policiestab_1122.png

1

Toolbar:

  • Create New - Lets you create a new policy. For more information, see Create a policy.

  • Edit - Lets you edit the policy. For more information, see Edit a Policy.

  • Publish - Publishes selected policy or policies.

  • More Actions:

    • Assign to Group --Lets you assign policy to a group.

    • Clone - Lets you clone a policy.

    • Delete - Deletes the selected group or groups permanently.

    • Force Publish - Lets you republish all the content irrespective of the policy status. This option allows you to re-push all content or configurations to all services in the group. Some of the scenarios where you might want to force publish the policy are:

      • There was a service that was down or did not successfully receive content when it was first pushed out.

      • Some content may have been modified or removed locally on a service (outside of CCM control) and you want to re-apply the content from the policy.

2

Policy List Pane:

  • Name - Name of the policy.

  • Description - Description of the policy.

  • Groups - Lists the group to which this policy is applied.

  • Policy Status - Status of the policy. The values are: Published, Unpublished, Failed, N/A.

  • Last Updated - Displays the time when the policy is updated.

  • Updated By - The user who updated the policy. You can also sort on any column. If you mouse over a column header, a sort icon is displayed: . Click the netwitness_sort.png icon to sort by the selected column.

3

Policy Details Panel:

netwitness_121_policydetails_1122.png

Displays the Displays the properties of the selected policy.

Toolbar:

  • Publish Policy - Lets you publish all the unpublished and/or failed content. For more information, see Create a Policy.

  • Edit Policy - Lets you edit the policy. For more information, see Edit a Policy.

  • Delete Policy - Deletes the selected policy or policies permanently.

  • Force Publish - Lets you republish all the content irrespective of the policy status.

Policy Details Pane:

  • Order - Order of the content.

  • Name - Name of the content.

  • Medium - Meta data source medium.

  • Last Updated - Displays the time when the content is last updated.

  • Subscription - Indicates if the content is subscribed or unsubscribed.

  • Status - The status of resource.

  • Subscribe - Lets you subscribe for the content if it is unsubscribed.

  • Unsubscribe - Lets you unsubscribe for the content if it is subscribed.

  • Enable - Lets you enable the content for the policy.

  • Disable - Lets you disable the content from the policy.

Below is an example of the Create Content Policy dialog.

netwitness_121_createcontentpolicy_1122.png

The table describes the information and options in the Create Policy dialog:

Field Description
Policy Name Name of the policy. The name should be unique.
Policy Description (Optional) Description of the policy. Description should not exceed 8000 characters.

Define Policy Settings:

netwitness_121_definepolicy3_1122.png

Field Description
Available Content

Displays the available content resources in your deployment. Click netwitness_expand.png expand the resource type.

netwitness_121_definepolicy4_1122.png

The following describes resource type:

  • Name - Name of the resource.

  • Medium - Meta data source medium. Available values for medium are as follows:

    • Endpoint: applied to content that uses meta derived from endpoint agent and endpoint server data

    • Log: applied to content that uses meta derived from log data

    • Packet: applied to content that uses meta derived from network packets

    • Log and packet: applied to content that correlates meta derived across log and packet data

  • Created - Displays the time when the resource is created

  • Last Updated - Displays the time when the resource is updated last.

  • Action- Click + to add the resource and its dependencies to your deployment.

Selected Content

Lists the selected resource.

Additionally, you can subscribe the content. Once the content is subscribed, the content resources are updated automatically in case of any changes.

netwitness_121_definepolicy5_1122.png

Assign to Group:

netwitness_121_assigntogroup_1122.png

Group List

Displays the list of groups associated with the policy. A group is disabled if it is already assigned to another policy.

  • Group Name

  • Policies

  • Services

  • Action

Selected Group Lists the selected groups. Click netwitness_addgroup.png to add groups.
Save and Close Saves the settings and closes the Create Policy dialog.
Save and Publish

Saves and publishes the created policy.

Note: This option is disabled if:
- Policy settings are not customized.
- Policy is not assigned to groups.