Configure Collection Protocols and Event Sources

This topic tells you how to configure collection protocols and the event sources using those protocols.

You configure the Log Collector to collect event data from your event sources in the Event Sources tab of the Log Collection parameter view.

To configure a collection protocol:

  1. Go to netwitness_adminicon_25x22.png (Admin) > Services from the NetWitness menu.
  2. Select a Log Collection service.
  3. Under Actions, select netwitness_ic-actns.png > View > Config to display the Log Collection configuration parameter tabs.

  4. Click the Event Sources tab.

    12.1_chooseCollectionMethod_1122.png

  1. Select a collection protocol (for example, File) and select Config.
  2. Click netwitness_add.png and select an event source.
  3. Select the newly added category and click netwitness_add.png.
  4. Specify the parameters for the event source. For details, see the individual collection protocol topics.

The following guides provide detailed instructions on how to configure the collection protocols and their associated event sources in NetWitness. Each guide includes an index to configuration instructions for the event sources supported for that collection protocol.

To configure individual collection protocols, see the following topics: