How to add Concentrator as data source to Broker in Explore page in RSA NetWitness Platform

Issue

How to add Concentrator as data source to Broker in Explore Page

Resolution

Please use the below steps to add Concentrator to Broker for aggregation.

1. Navigate to the Broker Explore page.
2. Right-click on the broker to select properties.
3. On the right-hand side, select Add from the dropdown. 
4. In Parameters type as device= :50005 username=admin password=
5. Click Send which shows Response Output as below.

6. Go to Broker-> Config page to see added Concentrator aggregation status.

Product Details

RSA Product Set: NetWitness Platform
RSA Product/Service Type: Security Analytics Server
RSA Version/Condition: 11.X
Platform: CentOS
O/S Version: 7

Summary

This document outlines the procedure to add Concentrator service to Broker as data source in explore page.

Approval Reviewer Queue

RSA NetWitness Suite Approval Queue