Setting User Preferences

You can view and manage your NetWitness global application preferences from your user profile. There are two global user preference dialogs that have different options. The user Preferences dialog is accessible from the Home, Springboard, Investigate (Events), Respond, Users, Hosts, Files and Configure views. The Preferences dialog is accessible from the Investigate, Dashboard, Reports, netwitness_configureicon_24x21.png (Configure) , and netwitness_adminicon_25x22.png (Admin) views. The dialog that you see depends on where you access the user preferences.

You can:

  • Change the application language
  • Set the application time zone
  • Set the application date and time format*
  • Select your default NetWitness starting location*
  • Select your default Investigate view*
  • Choose a dark or light theme for the application*
  • Change your password (See Changing Your Password for more information.)
  • Enable or disable notifications**
  • Enable or disable context menus**

* You can make this change from the User Preferences dialog accessible from these views: Home, Springboard, Investigate > Events (formerly Event Analysis), Respond, Users, Hosts, Files, and netwitness_configureicon_24x21.png (Configure) > (Capture Policies, Incident Rules, Incident Notifications, and Log Parser Rules). See User Preferences.

** You can make this change from the Preferences dialog accessible from these views: Investigate, Dashboard, Reports, netwitness_configureicon_24x21.png (Configure) > (Live Content, Subscriptions, ESA Rules, and Custom Feeds), and netwitness_adminicon_25x22.png (Admin) . See Preferences.

Preferences

This section gives instructions for various tasks that can be performed in the Preferences dialog that is accessible in Investigate, Dashboard, Reports, netwitness_configureicon_24x21.png (Configure) , and netwitness_adminicon_25x22.png (Admin) .

View your Preferences

In the upper right corner of the NetWitness browser window, select your username, for example netwitness_admin_icon_53x16.png, and then select Profile.
The Preferences dialog shows your current preferences.
password_change_1231.png

Set the Language and Time Zone

You can change your preferred language for the entire NetWitness Platform. The default language is English (United States).

  1. In the Preferences dialog, select your localization preferences:
    1. Language: Select your preferred language for NetWitness.
    2. Browser Time Zone: Set the time zone to use in the NetWitness.
  2. Click Apply.
    Your preferences become effective immediately.

Note: When Daylight Saving Time (DST) starts or ends, if the selected time zone for the currently logged in user observes DST, the user interface automatically updates to reflect the correct time.

Enable or Disable System Notifications for Your User Account

By default, NetWitness system notifications are enabled when a new user account is created. You can disable and enable these notifications at any time.

  1. In the Preferences dialog Application Settings section:
    • To enable notifications for your user account, select the Enable Notifications checkbox.
    • To disable notifications, clear the Enable Notifications checkbox.
  2. Click Apply.
    Your preference becomes effective immediately.

Enable or Disable Context Menus for Your User Account

By default, context menus are enabled when a new user account is created. Context menus provide additional functions for specific views when you right-click a view.

  1. In the Preferences dialog Application Settings section:
    • To enable context menus for your user account, select the Show Context Menus checkbox.
    • To disable context menus, clear the Show Context Menus checkbox.
  2. Click Apply.
    Your preference becomes effective immediately.

 

Note: Settings available on the Investigate tab in the Preferences dialog are documented in the NetWitness Investigate User Guide.

 

User Preferences

This section gives instructions for various tasks that can be performed in the User Preferences dialog that is accessible in the Springboard, Events, Respond, Users, Hosts, Files and netwitness_configureicon_24x21.png (Configure) views.

View Your User Preferences

In the upper right corner of the NetWitness browser window, select your username, for example, netwitness_admin_icon_53x16.png.
The User Preferences dialog shows your current preferences when accessed through the Home, Springboard, Events, Respond, Users, Hosts, Files and netwitness_configureicon_24x21.png (Configure) views.

netwitness_userpreferences_288x569.png

Any selections that you make become effective immediately.

Set the Language, Time Zone, and Date and Time Format

You can change your preferred language for the entire NetWitness Platform UI. The default language is English (United States). You can also change the time zone and the format of the date and time for your location.

  1. Open the User Preferences dialog.
  2. In the User Preferences dialog, select your localization preferences:
    1. Language: Select your preferred language for NetWitness.
    2. Time Zone: Set the time zone to use in the NetWitness.
    3. Date Format: Set the format for the order of the display of the month (MM), day (DD), and year (YYYY). For example, the MM/DD/YYYY format shows the date as 05/11/2019.
    4. Time Format: Set the time as 12-hour or 24-hour time. For example, 2:00 PM in 12-hour time is 14:00 in 24-hour time.

    Changes in the Investigate and Respond views become effective immediately.

Note: When Daylight Saving Time (DST) starts or ends, if the selected time zone for the currently logged in user observes DST, the user interface automatically updates to reflect the correct time.

Select the Default NetWitness Platform Starting Location

  1. Open the User Preferences dialog.
  2. In the Default Landing Page field, select the opening view that you would like to see when you log in to NetWitness. You can choose Home Page, Springboard, Investigate, Respond, Users, Hosts, Files, Dashboard, Reports, Configure, and Admin, and according to your user role. For example, you can choose Respond to go directly to the relevant section of the application for Incident Responders. For more information, see Setting Up Your Default View by SOC Role to help you select the appropriate default view.
    This selection sets the default view for the entire application. The changes take effect immediately.

Select the Default Investigate View

  1. Open the User Preferences dialog.
  2. In the Default Investigate View field, select the default landing page when you log in to NetWitness and navigate to Investigate. You can choose Navigate, Legacy Events (if enabled), Events (formerly Event Analysis), or Malware Analysis as the default Investigate view. For example, you can choose Events for the default Investigate view to go directly to the Events view to see the events generated for a service. See Setting Up Your Default View by SOC Role to help you select the appropriate default view. For more information, see the NetWitness Investigate User Guide.

Note: After you have applied the change in the drop-down, sometimes it takes few seconds for the changes to take effect.

Choose the Appearance of NetWitness Platform

You can choose a dark theme or a light theme for your application, depending on your personal preference. When you change the theme, the Respond view and some Investigate views change to the light or dark theme. Your selection only changes how NetWitness appears to you, not other users.

  1. Open the User Preferences dialog.
  2. Under Theme, select one of the following options:
    • Dark: The dark theme is best for darker environments or when you do not need as much contrast.
    • Light: The light theme is best for lighter environments, when you need more contrast, or when you are projecting the application for others to view. Since some views are not affected by the theme changes, you may want to choose the light theme for a more cohesive viewing experience.

Changes become effective immediately.

The following figure shows the dark theme.
RespDarkTheme1.png

The following figure shows the light theme.
RespLightTheme1.png