RSA NetWitness Event Stream Analysis (ESA)
The RSA NetWitness ESA host provides advanced stream analytics such as correlation and complex event processing at high throughputs and low latency. It is capable of processing large volumes of disparate event data from Concentrators. ESA uses an advanced Event Processing Language that allows analysts to express filtering, aggregation, joins, pattern recognition and correlation across multiple disparate event streams. Event Stream Analysis helps to perform powerful incident detection and alerting. It offers the same extensive features and functionality as it’s physical version.
RSA NetWitness Suite on Azure
RSA NetWitness 10.6.4 in Azure enables customers to obtain the visibility needed to secure critical third party cloud infrastructure.
Flexible deployment options now allow RSA NetWitness components to be deployed either in a Full Stack (all cloud) or Hybrid (on premise & cloud) configuration which gives analysts visibility to logs across both their physical and cloud environments through a single view.
The solution is available to customers with a throughput license (BYOL). To obtain a throughput license, contact the RSA Sales team.
The benefits of RSA NetWitness Azure cloud solutions include: