Skip to content
  • There are no suggestions because the search field is empty.

Customer Experience Improvement Program and Live Feedback

Tags: Version 12.2

The NetWitness Platform Customer Experience Improvement Program (CEIP) is an initiative to continuously improve NetWitness Platform. When a customer enables this program, the CEIP performs analytics about how individual users work in NetWitness Platform without interrupting their workflow or personally identifying users. As part of this program, NetWitness gains insights on your deployment and license usage and analytics on pages viewed and actions taken. NetWitness uses these analytics when making decisions about new features and enhancements to prioritize in upcoming releases. For more information, see "Configure the Customer Experience Improvement Program" in the System Configuration Guide.

Note: RSA Live Feedback is automatically enabled when you create a Live services account.

Product Usage Analytics

  • Information Collected:

    User Identifier

  • Description:

    A unique identifier for each user of the NetWitness Platform server where CEIP is enabled. No personally identifiable information about the user is collected.


  • Information Collected:

    User Role

  • Description:

    The NetWitness user role assigned to the user.


  • Information Collected:

    License Identifier

  • Description:

    A license identifier of the NetWitness instance associates users with an organization. The real identity of the organization is obfuscated.


  • Information Collected:

    Page Views

  • Description:

    The URL of the page, some browser information (such as language and browser version), and the title of the page.


  • Information Collected:

    Click and Focus Events

  • Description:

    User interactions with elements on each page viewed. No user entered text or visible data in the view is collected.


NetWitness Live Feedback Analytics

  • Information Collected: Log Decoder
  • Description:

    • Total Bytes Captured

    • Capture Rate
    • Capture Dropped
    • Feeds
    • Lua Parser Count
    • App Rules Count
    • Log Parser Count

  • Information Collected: Decoder
  • Description:

    • Total Bytes Captured

    • Capture Rate
    • Capture Dropped
    • Feeds
    • Lua Parser Count
    • App Rules Count
    • Network Parser Count

  • Information Collected: Log Collector
  • Description:

    • System Version Information

    • System Services Running Since

    • System Service Up-time

    • Total Pipelines

    • Total Active Pipelines

    • Total Custom Pipelines

    • Custom Pipeline Names


  • Information Collected: ESA Analytics Server
  • Description:

    • Number of Enabled ESA Rules

    • Threat detection Status (enabled or not)


  • Information Collected: Malware Service
  • Description:

    • Total File Bytes Captured


  • Information Collected: Security Server
  • Description:

    • System Version Information

    • System Services Running Since

    • System Service Uptime


  • Information Collected: Admin Server
  • Description:

    • System Version Information

    • System Services Running Since

    • System Service Uptime


  • Information Collected: Investigate Server
  • Description:

    • System Version Information

    • System Services Running Since

    • System Service Uptime


  • Information Collected: Context-Hub Server
  • Description:

    • System Version Information

    • System Services Running Since

    • System Service Uptime


  • Information Collected: Correlation Server
  • Description:

    Telemetry stats to be aggregated:

    • Memory Usage

    • CPU Locked Time in Nanoseconds

    • CPU Locked Time in Percentage (%)

    • Esper Rules


  • Information Collected: NW Insight Sensor
  • Description:

    • Sensor AWS Region

    • AWS Tenant ID

    • Sensor Device ID


  • Information Collected:

    License Usage and Version of Host (Live Feedback)

  • Description:
    • Product Name
    • Product Version
    • Product Instance
    • Activation Key
    • Details of each component (ID, name, version, instance ID)

  • Information Collected:

    Endpoint Server
    (Additional Feedback Insights)

  • Description:

    Usage:

    • Number of agents deployed

    OS Used:

    • WinHosts
    • LinuxHosts
    • MacHosts
    • Total Hosts

  • Information Collected:

    UEBA  Server
    (Additional Feedback Insights)

  • Description:

    User Information:

    • Daily Active Users Count

    Alert

    • Daily Alerts Created Count
    • Daily Events Processed Count
    • Daily Alert Indicators Created Count
    • Daily Smarts Created Count
    • Daily Smart Indicators Created Count

  • Information Collected:

    Concentrator
    (Additional Feedback Insights)

  • Description:

    Version of Concentrator


  • Information Collected:

    Decoder
    (Additional Feedback Insights)

  • Description:

    Version of Decoder


  • Information Collected:

    ESA Analytics Server
    (Additional Feedback Insights)

  • Description:

    Version of ESA


  • Information Collected:

    Log Decoder
    (Additional Feedback Insights)

  • Description:

    Version of Log Decoder


  • Information Collected:

    Archiver
    (Additional Feedback Insights)

  • Description:

    Version of Archiver


  • Information Collected:

    Other Services
    (Additional Feedback Insights)

  • Description:

    Version of any other deployed services


You are here

Customer Experience Improvement Program and Live Feedback