In the ESA deployment view, you can view a list of all the deployments associated with the policies and the actions you can perform with them. It helps you manage and set-up deployments within CCM to create, edit, deploy, remove, and stop deployments. NetWitness Platform XDR provides two methods to manage deployments.

You can view deployments in the following ways:

  • Using the ESA Deployments tab. The ESA Deployments tab provides a consolidated view of all the available deployments within CCM. You can create, edit, remove, and pause deployments.

  • Using a specific policy. In this method, you cannot view other deployments. You need to go to each policy and create, edit, remove and pause a deployment.

    To view all deployments using the ESA Deployments tab

    1. Go to Configure.png (CONFIGURE) > Policies > Content.

    1. Under Settings, click Event Stream Analysis > ESA Deployments.

    The available deployments are displayed.


    To view a deployment from a selected policy

    1. Go to Configure.png (CONFIGURE) > Policies.

    1. In the policies panel, click Content.

    The available policies are displayed.

    1. Click a Policy.

    The selected policy view is displayed, and the Application Rule is default selected.

    1. Click Event Stream Analysis Rule > Deployments.

    The available deployments for the selected policy are displayed.

    Caution: An icon 121_Cautionicon3_1222.png is displayed in the deployments view indicating services require deployments, publish policy will fail for correlation servers. You may need to create deployments for such services if required.