This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject

NetWitness Community

  • Home
  • Products
    • NetWitness Platform
      • Advisories
      • Documentation
        • Platform Documentation
        • Known Issues
        • Security Fixes
        • Hardware Documentation
        • Threat Content
        • Unified Data Model
        • Videos
      • Downloads
      • Integrations
      • Knowledge Base
    • NetWitness Cloud SIEM
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Detect AI
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Investigator
    • NetWitness Orchestrator
      • Advisories
      • Documentation
      • Knowledge Base
      • Legacy NetWitness Orchestrator
        • Advisories
        • Documentation
  • Community
    • Blog
    • Discussions
    • Events
    • Idea Exchange
  • Support
    • Case Portal
      • Create New Case
      • View My Cases
      • View My Team's Cases
    • Community Support
      • Getting Started
      • News & Announcements
      • Community Support Forum
      • Community Support Articles
    • Product Life Cycle
    • Support Information
    • General Security Advisories
  • Training
    • Blog
    • Certification Program
    • Course Catalog
    • New Product Readiness
    • On-Demand Subscriptions
    • Student Resources
    • Upcoming Events
  • Technology Partners
  • Trust Center
Sign InRegister Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
NetWitness Education Courses
  • NetWitness Community
  • NetWitness Education
  • Courses
  • RSA NetWitness Logs Event Source Configuration
  • Options
    • Subscribe to RSS Feed
    • Bookmark
    • Subscribe
    • Email to a Friend
    • Printer Friendly Page
    • Report Inappropriate Content
No ratings

RSA NetWitness Logs Event Source Configuration

ConnorMccarthy
ConnorMccarthy Beginner
Beginner
Options
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

on ‎2018-06-22 12:31 PM

On-Demand Lab Details

Register

In order to register for a class, you need to first create a Dell Education account

If you need further assistance, contact us

 

Summary

This self-paced, on-demand lab provides an overview of how RSA NetWitness log collection is configured and performed for a variety of event source types such as Windows, File Reader, ODBC, Check Point Firewall, VMware, SDEE, SNMP and Netflow.

 

Overview

This self-paced, on-demand lab provides an overview of how RSA NetWitness log collection is configured and performed for a variety of event source types such as Windows, File Reader, ODBC, Check Point Firewall, VMware, SDEE, SNMP and Netflow. It also provides steps to practice configuring syslog, Windows, ODBC and FileReader event sources.

 

Audience
Internal, CS, PS, SE, Partner, Customer

 

Delivery Type

3 hours

On-Demand Lab (self-paced eLearning with lab)


Duration
Note: RSA University’s on-demand lab environment is provided for 10 hours of overall practice time over a 14-day period.


Accessing the Lab Environment
Lab exercises are performed in the RSA University virtual lab environment. The downloadable Lab Guide provides detailed instructions on access the environment. For more information please view the document Access RSA University Virtual Labs – available on the RSA University site: RSA University Content

 

Prerequisite Knowledge/Skills

  • RSA NetWitness Logs and Packets Foundations training course or equivalent experience
  • Familiarity with networking fundamentals
  • Familiarity with Linux
  • Familiarity with MS Windows

 

Learning Objectives

Upon successful completion of this course, participants should be able to:

  • Describe how log data is created and processed by RSA NetWitness
  • Configure log collection for RSA supported event source types.

Lab exercises will be provided for the most common event source types which include:

  • Syslog
  • Windows
  • File Reader
  • ODBC
  • Validate data capture
  • Set up event source monitoring
  • Troubleshoot Event Sources

 

Course Outline

Log Data Collection
Configuring Event Sources
Event Source monitoring

 

 

 

 

On-Demand Lab Details

Register

In order to register for a class, you need to first create a Dell Education account

If you need further assistance, contact us

  • 11
  • 11.x
  • Admin
  • Configuration
  • Ed Services
  • education
  • Education Services
  • english
  • events
  • expanding
  • fee
  • lab
  • Logs
  • logs & network
  • logs and packets
  • NetWitness
  • netwitness training
  • NW
  • NWP
  • on demand lab
  • on-demand
  • on-demand lab
  • online
  • Product Training
  • rsa
  • RSA NetWitness
  • rsa netwitness logs event source configuration
  • RSA NetWitness Platform
  • RSA NetWitness Training
  • RSA University
  • RSAU
  • source configuration
  • training
  • Training Course
  • university
  • Version 11
  • Virtual
Was this article helpful? Yes No
0 Likes
Share
Version history
Last update:
‎2018-06-22 12:31 PM
Updated by:
ConnorMccarthy Beginner
Contributors
  • ConnorMccarthy
    ConnorMccarthy
Powered by Khoros
  • Blog
  • Events
  • Discussions
  • Idea Exchange
  • Knowledge Base
  • Case Portal
  • Community Support
  • Product Life Cycle
  • Support Information
  • About the Community
  • Terms & Conditions
  • Privacy Statement
  • Acceptable Use Policy
  • Employee Login
© 2022 RSA Security LLC or its affiliates. All rights reserved.