Configure Insight as a Data Source

You can configure Insight as a data source for Context Hub and use the Context Hub server to fetch contextual information from NetWitness Insight. Use the following procedure in this topic to add Insight as a data source for Context Hub service and configure the settings for NetWitness Insight.

Prerequisities

Before you configure the Insight data source, ensure that:

  • NetWitness Platform is in version 12.3 or later.
  • Context Hub service is available in admin icon (Admin) > Services view of NetWitness Platform.
  • Insight Sensor is installed and configured.
  • Cloud Connector Sensor is installed and configured.

To add Insight as a data source for Context Hub

  1. Log in to the NetWitness Platform.

  2. Go to admin icon (Admin) > Services.

    The services view is displayed.

  3. Select the Context Hub service and click insight data source icon > View > Config.

    The Services Config View of Context Hub is displayed.

    add Insight data source

  4. In the Data Sources tab, click insight data source icon > Insight.
    The Add Data Source dialog is displayed.

    how to add Insight data source

    The required fields to configure the Insight data source are automatically updated.

  5. Provide the following information:

    • By default, the Enable checkbox is selected. If this option is unchecked, you cannot add the data source or view the contextual information.

    • (Optional) Name: The name that identifies the data source and is automatically taken as Cloud-Connector-server. You can change the name. NetWitness recommends keeping the default name which comes from the data source.

    • (Optional) Max. Concurrent Queries: You can configure the maximum number of concurrent queries to be run against the configured data sources. The default value is 10.

  6. Click Test Connection to test the connection between Context Hub and the NetWitness Insight.

  7. Click Save.

    Insight is added as a data source for Context Hub and is displayed in the Data Sources tab.

    how to add Insight data source

Next steps

After completing the configuration, you can view the contextual data in the Context Summary Panel for the Asset in the Respond or Investigate > Events view. For more information, see View Contextual Information for an Asset.

See also