Skip to content
  • There are no suggestions because the search field is empty.

RSA Archer Integration

Archer Integration

Administrators can integrate NetWitness with Archer Cyber Incident & Breach Response to send alerts and incidents from NetWitness to Archer for incident management and remediation. This guide provides a high-level workflow for configuring this integration.

Note: When you upgrade from Security Analytics to NetWitness, the Archer Cyber Incident & Breach Response integration is no valid and must be re-configured.

The following table list the NetWitness  integration options with Archer Cyber Incident & Breach Response Version 1.3.1.2.

  • Archer Cyber Incident & Breach ResponseVersion: 1.3.1.2
  • NetWitness  Integration: ESA Correlation
  • Reference:

    See "Configure ESA Correlation for Integration with Archer Cyber Incident & Breach Response" section.


  • Archer Cyber Incident & Breach ResponseVersion: 1.3.1.2
  • NetWitness  Integration: Reporting Engine (RE)
  • Reference: See "Configure Reporting Engine for Integration with Archer Cyber Incident & Breach Response" section.

  • Archer Cyber Incident & Breach ResponseVersion: 1.3.1.2
  • NetWitness  Integration: Respond
  • Reference:

    See "Configure Respond for Integration with Archer Cyber Incident & Breach Response 1.3.1.2" section.


  • Archer Cyber Incident & Breach ResponseVersion: 1.3.1.2
  • NetWitness  Integration: Archer Feeds
  • Reference: See "Archer Feeds" section.

  • Column 1:
  • Column 2: