NetWitness Cloud Link Service enables you to use the NetWitness Detect AI solution and its features by providing a secure transportation mechanism between existing RSA NetWitness Platform hosts (Log Decoders) and the NetWitness Detect AI service. For example: to perform analytics on the NetWitness Detect AI, you must install and register the Cloud Link Service on at least one Log Decoder host.
Cloud Link service is a sensor that you must install and register on your on-premise host to:
You can install Cloud Link Service on the following host types:
This section provides information on how data is transferred using Cloud Link Service:
Single Deployment: Data Transfer
Note: Cloud Link Service ensures that no data is lost during temporary network issues or outages. If the outage lasts for more than 7 days, then the data older than 7 days will not be considered.
Multiple Deployment: Data Transfer
Data Transfer from NetWitness Detect AI
NetWitness Detect AI transfers the alerts generated to the on-premise NetWitness Platform Respond server which can be viewed on the user interface for incident management.