Reporting Engine Sources Tab
The services configuration parameters are available in the Sources tab of the Services Config view for the Reporting Engine. The Sources tab for the Reporting Engine service in the Services Config view controls that data sources associated with a Reporting Engine. The Source tab consists of a single panel with a toolbar and a grid that lists the data sources associated with the Reporting Engine.
Workflow
| Role | I want to... | Refer to... |
|---|---|---|
| Administrator | Configure Data Source to Reporting Engine | Configure the Data Sources |
| Administrator | Configure Data Source Permissions for Reporting Engine | Configure Data Source Permissions |
| Administrator | Configure Data Privacy for Reporting Engine | Configure Data Privacy for the Reporting Engine |
| Administrator | Define Reports, Charts, and Alerts | Define Reports, Charts and Alerts |
| Administrator | Configure Reporting Engine Settings | Configure Reporting Engine Settings |
| Administrator |
Add, delete or edit a new or available service* |
Configure the Data Sources |
| Administrator |
Set a data source as default* |
Configure the Data Sources |
|
Administrator |
Configure data source permissions* |
*You can complete these tasks here.
Related Topics
Quick Look
Here is example of the Sources tab where the available services are displayed.
| 1 | Displays all the available configurable tabs. |
| 2 | Displays the available configuration parameters for the selected service . |
| 3 | Displays the field parameters for the selected service. |
The data sources available to the Reporting Engine for which you are defining reports, charts and defining alerts are:
-
NWDB Data Sources - The NetWitness Database (NWDB) data sources are Decoders, Log Decoders, Brokers, Concentrators, Archiver, and Collection.
Note: When a data privacy plan has been implemented to limit access to sensitive data on a data source, you must configure different service accounts in Reporting Engine for privileged and non-privileged users. To configure different service accounts for data privacy, you can add more than one NWDB data source. This procedure is available under Configure Reporting Engine Settings.
IMPORTANT: If you change the admin password on a NetWitness service that is used as a Reporting Engine data source, you must remove and then re-add the service as a data source.
- Warehouse Data Sources - The Warehouse data sources are Horton Works and MapR.
- Respond Data Sources - Respond is used to generate reports on alerts and incidents. The Respond data sources are Reporting Engine, ESA, Malware, EndPoint, and Web Threat Detection. Respond is used to store the alerts and incidents reports.
If you set a source as the default data source, NetWitness uses that source when you create reports and alerts unless you choose to override it with one of the other sources listed in this tab.
Note: You can manage access control to NWDB and Warehouse Data Sources. For more information, see Configure Reporting Engine Settings.
Features
You can perform the following actions on the Sources tab:
| Icon | Actions |
|---|---|
 |
This option adds new services as data sources for Reporting Engine. Add existing services (Archiver, Workbench, and Collection) as data sources for Reporting Engine. For details, see the corresponding topic: |
 |
This option removes data sources from a Reporting Engine. |
 |
This option configures the Data Source Permissions. This is enabled only for NWDB and Warehouse Data Sources. For more information, see Configure Data Source Permissions. |
 |
This option sets the default data sources for a Reporting Engine. This is the source to which NetWitness defaults in the Data source field of the following views:
|
The NetWitness data sources are listed under the different categories as follows:
- NWDB Data Sources category displays the NetWitness data sources.
- Warehouse Data Sources category displays the Warehouse data sources.
| Column | Description |
|---|---|
 |
Clicking the check box selects the data source. After you select it, you can use toolbar to remove the source or set the source as the default. |
| Name |
Displays the name of the data source. |
| Address |
Displays the IP Address of the data source. |
| Port |
Displays the port of the data source. |
| Type |
Displays the service type of the data source. |
| Thread Count |
Displays the thread pool size used for executing rules on the data source. |
