Skip to content
  • There are no suggestions because the search field is empty.

Endpoint Sources - Policies

Endpoint Sources - PoliciesEndpoint Sources - Policies

Note: The information in this topic applies to NetWitness Version 11.3 and later.

The netwitness_adminicon_25x22.png (Admin) > Endpoint Sources view contains two tabs: Groups and Policies.

Workflow

netwitness_eppolicies.png

What do you want to do?

*You can perform this task in the current view

Related Topics

Quick Look

Below is an example of the Policies tab:

policy_hlp.png

Create Policy

Below is an example of the Create Policy dialog. The table describes the information and options in the Create Policy dialog.

identifypolicy.png

Panels for Log File PolicyPanels for Log File Policy

There are two panels for defining the parameters for an Agent Log File Policy: Define Connection Settings and Define File Policy Settings.

Define Connection Settings

Below is an example of Define Connection Settings panel. The table describes the information and available options.

defineLogPolicy.png

Define File Policy Settings

filePolicyType2.png

For a list of the currently supported types, see Currently Supported File Log Event Source Types.

Define Policy Panel for Agent Endpoint PolicyDefine Policy Panel for Agent Endpoint Policy

Below is an example of Define policy panel. The table describes the information and options for Agent Endpoint policy:

MemDLLAuto2.png