This section explains how to import a preconfigured report to RSA NetWitness. To learn how to create a report manually, see the section about creating and viewing reports in RSA NetWitness.
This step requires the importing Feed Service rules step to be completed.
The distribution kit contains the CyberTrace_Reports.zip file. This file contains a preconfigured report, CyberTrace Report
.
The CyberTrace Report
report contains the following data:
You can import this file in the same way that you import the CyberTrace_Rules.zip file (which contains rules). After the report is imported, you must specify the data source.
To specify the data source for the "CyberTrace Report" report:
The Manage tab is displayed.
The Reports view is displayed.
CyberTrace Report
report, and then select Schedule Report.The Schedule Report form appears.
Select either the Concentrator that receives events from Feed Service or the Log Decoder that stores events from Feed Service.