Skip to content
  • There are no suggestions because the search field is empty.

How to configure the data source permissions for reports and rules when the Data Source or NetWitness DB lists are empty in RSA Security Analytics

Issue

If you schedule a report or test a rule and you use a user that has been assigned a new security role, why are the “NetWitness DB” or "Data Source" select lists empty?

Schedule a report: (Administration > Reports > Manage tab - Reports > Click on Actions config tool next to the Report and select "Schedule Report")
 
User-added

Test a rule: (Administration > Reports > Manage tab - Rules > Select the report you would like to edit and click on the edit button above the reports > click on the "Test Rule" button at the bottom of the rule config)

User-added

Cause

The "Sources" permissions configured on the Reporting Engine are not configured for the new role configured.


Resolution

  1. Select Administration > Services in the RSA Security Analytics UI.
  2. In the Services panel, select a Reporting Engine service.
  3. Click View > Config. The Services Config - View of Reporting Engine is displayed.
  4. Select the Sources tab. The Service Config View is displayed with the Reporting Engine Sources tab open. 
  5. Select the data source for which you want to configure permissions by selecting the checkbox. (Note: If there are no Data Sources you will need to create a data source before you can create rules)
  6. Click "The Data Source Permissions" button above the sources.
  7. Modify the access permission for different roles based on the type of service account of the data source. The permission can be either Read Only or No Access.  If the role of the user is set to No Access the data source will not show up in the list.
     
    Access
     
  8. Click Save. The required permissions are configured for the data source.

Internal Comments



Product Details

RSA Product Set: Security Analytics
RSA Product/Service Type: Core Appliance, User Interface
RSA Version/Condition: 10.5.x, 10.6.x, 11.0.X, 11.1.X, 11.2.X, 11.3.X

Summary

The Data Source select drop down to create a rules for reports is empty, what do I need to configure?


Approval Reviewer Queue

RSA NetWitness Suite Approval Queue