Step 5. Start and Stop Aggregation

When a Broker or Concentrator starts up, it automatically begins aggregating data if Aggregate Autostart is enabled. When autostart is not enabled, you can start and stop data aggregation manually.

netwitness_step5-110_brokerconcentrator_configworkflow.png

Note: The Aggregate Configuration Settings (in the Services Config View - Broker or Concentrator General Tab) determine whether Aggregate autostart is enabled, as well as the size of a round of aggregation and time between rounds.

To start and stop data aggregation in the services system view:

  1. Go to netwitness_adminicon_25x22.png (Admin) > Services.

  2. In the Services view, select a Broker or Concentrator, and select netwitness_ic-actns.png​ > View > System.

    netwitness_121_step5_startstopservice_1122.png

  3. To stop a Broker or Concentrator that is capturing data, click Stop Aggregation in the toolbar.
    The service stops aggregating data and the Stop Aggregation option in the toolbar is unavailable. The Start Aggregation option becomes active.

    netwitness_step5_stopaggregation.png

  4. If you want the service to start aggregating data again, click Start Aggregation.

    You can now investigate the captured data in the Investigation module.

    netwitness_step5_startaggregation.png

To start and stop aggregation in the services config view:

  1. Go to netwitness_adminicon_25x22.png (Admin) > Services.

  2. In the Services view, select a Broker or Concentrator, and select netwitness_ic-actns.png > View > Config.

    The Services Config view, which includes the Aggregate Services section, is displayed.

    netwitness_serviceconfigview1_generaltabbrokr113.png

  3. To start aggregation on the selected Broker or Concentrator, click netwitness_startaggr_126x26.png in the Aggregate Services toolbar.

    When aggregation starts, the status of all online aggregate services changes to consuming. The Start Aggregation button is disabled and the Stop Aggregation button is enabled.

    netwitness_step5iistartaggregation.png

  4. To stop aggregation, click netwitness_icon-stopaggregation.png in the Aggregate Services toolbar.

    When aggregation stops, the status of all consuming aggregate services changes to online. The Stop Aggregation button is unavailable and the Start Aggregation button is available.

    netwitness_step5iistopaggregation.png