Search for Specific Event Sources
In some cases, your Log Collector may contain a lot of pre-configured event sources for a specific collection protocol (for example File). If so, you can quickly search for one or more event sources based on address (IP/hostname) or name.
To search for one or more specific event sources:
- Go to
(Admin) > Services from the NetWitness menu.
- Select a Log Collection service.
- Under Actions, select
> View > Config to display the Log Collection configuration parameter tabs.
- Click the Event Sources tab.
-
In the Event Sources tab, select any collection protocol/Config from the drop-down menu.
-
From the Filter by Name / Address text field, enter an IP address or hostname and click Enter.
Event sources that match the information entered into the search box are returned. For example, the image below shows a list of Check Point event sources whose names match the string checkpoint11.
