1. [Home](https://www.g2.com/) 2. ... 3. [Extended Detection and Response (XDR) Platforms](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms) 4. [NetWitness Platform Discussions](https://www.g2.com/products/netwitness-platform/discuss) [ ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_67ea082c7c83c1aefca7eee09288f99b/netwitness-platform.png "Product Avatar Image") ](/products/netwitness-platform/reviews) [ NetWitness Platform ](/products/netwitness-platform/reviews) (24)3.9/5 NetWitness is a comprehensive threat detection, investigation and response platform that combines visibility, analytics, insight, and automation into a single solution. It collects and analyzes data across all capture points (logs, packets, netflow, endpoint and IoT) and computing platforms (physical, virtual and cloud), enriching data with threat intelligence and business context. Show More * * * ### 21.0 Nps Score Already have NetWitness Platform? ### All NetWitness Platform Discussions Search Most CommentedMost HelpfulPinned by G2Newest All DiscussionsDiscussions with CommentsPinned by G2Discussions without Comments FilterFilter Filter byExpand/Collapse Sort by Most Commented Most Helpful Pinned by G2 Newest Filter by All Discussions Discussions with Comments Pinned by G2 Discussions without Comments ![Pinned by G2 as a common question](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Pinned by G2 as a common question") G2 Pinned by G2 as a common question • over 3 years ago More Options - [ # What is one of the biggest differentiators for RSA NetWitness platform? ](/discussions/what-is-one-of-the-biggest-differentiators-for-rsa-netwitness-platform) What is one of the biggest differentiators for RSA NetWitness platform? [ Extended Detection and Response (XDR) Platforms ](https://www.g2.com/tags/extended-detection-and-response-xdr-platforms)[ Network Detection and Response (NDR) Software ](https://www.g2.com/tags/network-detection-and-response-ndr-software)[ User and Entity Behavior Analytics (UEBA) Software ](https://www.g2.com/tags/user-and-entity-behavior-analytics-ueba-software)[ Security Orchestration, Automation, and Response (SOAR) Software ](https://www.g2.com/tags/security-orchestration-automation-and-response-soar-software-0178ac96-a8e8-4cfc-838c-e0d3b050bff2) [ Security Information and Event Management (SIEM) Software ](https://www.g2.com/tags/security-information-and-event-management-siem-software) Show More * * * \<0\>0\>Upvotes * * * 0 Comments [![linkedin](/assets/social-logos/linkedin-afe65e46604a5bd5105ab9c856116204040b6b3f2b2d42562fc8071ca0c48ca0.svg "linkedin")](https://www.linkedin.com/shareArticle?mini=true&summary=Ask+NetWitness+Platform+questions+and+get+answers+from+expert+users+in+our+NetWitness+Platform+Discussions+section.&title=NetWitness+Platform+Discussions+%7C+G2&url=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss) [![twitter](/assets/social-logos/twitter-61aaec80434c71387b8f7326e480592eae71c0a65afd051d66fce9b75a9bf417.svg "twitter")](https://twitter.com/intent/tweet?text=NetWitness+Platform+Discussions+%7C+G2&url=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss&via=G2dotcom) [![facebook](/assets/social-logos/facebook-350d0b410d6b10debcf893050e803a8633d53561aa42807b087b8daf9be3668f.svg "facebook")](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss) [![gmail](/assets/social-logos/gmail-6db42f21e7c254fae201b112bef0dd15d25223a5cbb32691ce80eab43761eadf.svg "gmail")](https://mail.google.com/mail/?view=cm&fs=1&tf=1&to=&su=NetWitness+Platform+Discussions+%7C+G2&body=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss%0aAsk+NetWitness+Platform+questions+and+get+answers+from+expert+users+in+our+NetWitness+Platform+Discussions+section.) [![mail](/assets/social-logos/mail-d55c53b04bf49872e40cd2443b85a99caa23394e6cf154ae32a9d08377c15d86.svg "mail")](mailto:?subject=NetWitness+Platform+Discussions+%7C+G2&body=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss%0aAsk+NetWitness+Platform+questions+and+get+answers+from+expert+users+in+our+NetWitness+Platform+Discussions+section.) ![copy_link](/assets/social-logos/copy_link-05d8dc5dc8576fc78425ad34d07241b060878835e555a30417ff41c18335e575.svg "copy\_link") ![Pinned by G2 as a common question](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Pinned by G2 as a common question") G2 Pinned by G2 as a common question • almost 4 years ago More Options - [ # What types of data can the RSA NetWitness platform capture and process? ](/discussions/what-types-of-data-can-the-rsa-netwitness-platform-capture-and-process) What types of data can the RSA NetWitness platform capture and process? [ Security Orchestration, Automation, and Response (SOAR) Software ](https://www.g2.com/tags/security-orchestration-automation-and-response-soar-software-0178ac96-a8e8-4cfc-838c-e0d3b050bff2)[ Security Information and Event Management (SIEM) Software ](https://www.g2.com/tags/security-information-and-event-management-siem-software)[ User and Entity Behavior Analytics (UEBA) Software ](https://www.g2.com/tags/user-and-entity-behavior-analytics-ueba-software) * * * \<0\>0\>Upvotes * * * 0 Comments [![linkedin](/assets/social-logos/linkedin-afe65e46604a5bd5105ab9c856116204040b6b3f2b2d42562fc8071ca0c48ca0.svg "linkedin")](https://www.linkedin.com/shareArticle?mini=true&summary=Ask+NetWitness+Platform+questions+and+get+answers+from+expert+users+in+our+NetWitness+Platform+Discussions+section.&title=NetWitness+Platform+Discussions+%7C+G2&url=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss) [![twitter](/assets/social-logos/twitter-61aaec80434c71387b8f7326e480592eae71c0a65afd051d66fce9b75a9bf417.svg "twitter")](https://twitter.com/intent/tweet?text=NetWitness+Platform+Discussions+%7C+G2&url=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss&via=G2dotcom) [![facebook](/assets/social-logos/facebook-350d0b410d6b10debcf893050e803a8633d53561aa42807b087b8daf9be3668f.svg "facebook")](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss) [![gmail](/assets/social-logos/gmail-6db42f21e7c254fae201b112bef0dd15d25223a5cbb32691ce80eab43761eadf.svg "gmail")](https://mail.google.com/mail/?view=cm&fs=1&tf=1&to=&su=NetWitness+Platform+Discussions+%7C+G2&body=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss%0aAsk+NetWitness+Platform+questions+and+get+answers+from+expert+users+in+our+NetWitness+Platform+Discussions+section.) [![mail](/assets/social-logos/mail-d55c53b04bf49872e40cd2443b85a99caa23394e6cf154ae32a9d08377c15d86.svg "mail")](mailto:?subject=NetWitness+Platform+Discussions+%7C+G2&body=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss%0aAsk+NetWitness+Platform+questions+and+get+answers+from+expert+users+in+our+NetWitness+Platform+Discussions+section.) ![copy_link](/assets/social-logos/copy_link-05d8dc5dc8576fc78425ad34d07241b060878835e555a30417ff41c18335e575.svg "copy\_link") ![Pinned by G2 as a common question](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Pinned by G2 as a common question") G2 Pinned by G2 as a common question • about 4 years ago More Options - [ # What is NetWitness used for? ](/discussions/what-is-netwitness-used-for) What is NetWitness used for? [ Security Orchestration, Automation, and Response (SOAR) Software ](https://www.g2.com/tags/security-orchestration-automation-and-response-soar-software-0178ac96-a8e8-4cfc-838c-e0d3b050bff2)[ Security Information and Event Management (SIEM) Software ](https://www.g2.com/tags/security-information-and-event-management-siem-software)[ User and Entity Behavior Analytics (UEBA) Software ](https://www.g2.com/tags/user-and-entity-behavior-analytics-ueba-software) * * * \<0\>0\>Upvotes * * * 1 Comment [![linkedin](/assets/social-logos/linkedin-afe65e46604a5bd5105ab9c856116204040b6b3f2b2d42562fc8071ca0c48ca0.svg "linkedin")](https://www.linkedin.com/shareArticle?mini=true&summary=Ask+NetWitness+Platform+questions+and+get+answers+from+expert+users+in+our+NetWitness+Platform+Discussions+section.&title=NetWitness+Platform+Discussions+%7C+G2&url=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss) [![twitter](/assets/social-logos/twitter-61aaec80434c71387b8f7326e480592eae71c0a65afd051d66fce9b75a9bf417.svg "twitter")](https://twitter.com/intent/tweet?text=NetWitness+Platform+Discussions+%7C+G2&url=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss&via=G2dotcom) [![facebook](/assets/social-logos/facebook-350d0b410d6b10debcf893050e803a8633d53561aa42807b087b8daf9be3668f.svg "facebook")](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss) [![gmail](/assets/social-logos/gmail-6db42f21e7c254fae201b112bef0dd15d25223a5cbb32691ce80eab43761eadf.svg "gmail")](https://mail.google.com/mail/?view=cm&fs=1&tf=1&to=&su=NetWitness+Platform+Discussions+%7C+G2&body=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss%0aAsk+NetWitness+Platform+questions+and+get+answers+from+expert+users+in+our+NetWitness+Platform+Discussions+section.) [![mail](/assets/social-logos/mail-d55c53b04bf49872e40cd2443b85a99caa23394e6cf154ae32a9d08377c15d86.svg "mail")](mailto:?subject=NetWitness+Platform+Discussions+%7C+G2&body=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss%0aAsk+NetWitness+Platform+questions+and+get+answers+from+expert+users+in+our+NetWitness+Platform+Discussions+section.) ![copy_link](/assets/social-logos/copy_link-05d8dc5dc8576fc78425ad34d07241b060878835e555a30417ff41c18335e575.svg "copy\_link") ![Pinned by G2 as a common question](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Pinned by G2 as a common question") G2 Pinned by G2 as a common question • over 4 years ago More Options - [ # What does RSA NetWitness do? ](/discussions/what-does-rsa-netwitness-do) What does RSA NetWitness do? [ User and Entity Behavior Analytics (UEBA) Software ](https://www.g2.com/tags/user-and-entity-behavior-analytics-ueba-software)[ Security Information and Event Management (SIEM) Software ](https://www.g2.com/tags/security-information-and-event-management-siem-software)[ Security Orchestration, Automation, and Response (SOAR) Software ](https://www.g2.com/tags/security-orchestration-automation-and-response-soar-software-0178ac96-a8e8-4cfc-838c-e0d3b050bff2) * * * \<0\>0\>Upvotes * * * 0 Comments [![linkedin](/assets/social-logos/linkedin-afe65e46604a5bd5105ab9c856116204040b6b3f2b2d42562fc8071ca0c48ca0.svg "linkedin")](https://www.linkedin.com/shareArticle?mini=true&summary=Ask+NetWitness+Platform+questions+and+get+answers+from+expert+users+in+our+NetWitness+Platform+Discussions+section.&title=NetWitness+Platform+Discussions+%7C+G2&url=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss) [![twitter](/assets/social-logos/twitter-61aaec80434c71387b8f7326e480592eae71c0a65afd051d66fce9b75a9bf417.svg "twitter")](https://twitter.com/intent/tweet?text=NetWitness+Platform+Discussions+%7C+G2&url=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss&via=G2dotcom) [![facebook](/assets/social-logos/facebook-350d0b410d6b10debcf893050e803a8633d53561aa42807b087b8daf9be3668f.svg "facebook")](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss) [![gmail](/assets/social-logos/gmail-6db42f21e7c254fae201b112bef0dd15d25223a5cbb32691ce80eab43761eadf.svg "gmail")](https://mail.google.com/mail/?view=cm&fs=1&tf=1&to=&su=NetWitness+Platform+Discussions+%7C+G2&body=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss%0aAsk+NetWitness+Platform+questions+and+get+answers+from+expert+users+in+our+NetWitness+Platform+Discussions+section.) [![mail](/assets/social-logos/mail-d55c53b04bf49872e40cd2443b85a99caa23394e6cf154ae32a9d08377c15d86.svg "mail")](mailto:?subject=NetWitness+Platform+Discussions+%7C+G2&body=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss%0aAsk+NetWitness+Platform+questions+and+get+answers+from+expert+users+in+our+NetWitness+Platform+Discussions+section.) ![copy_link](/assets/social-logos/copy_link-05d8dc5dc8576fc78425ad34d07241b060878835e555a30417ff41c18335e575.svg "copy\_link") NG Loading... [Neelesh G.](https://www.g2.com/users/4faefaab-34ca-4e46-bfea-6cfbff0776a7 "Neelesh G.") • about 5 years ago C C More Options - [ # Any feasible or easy way to create a customize log parser for not well known devices? ](/discussions/any-feasible-or-easy-way-to-create-a-customize-log-parser-for-not-well-known-devices) I have faced issue with Microtik router in creating a custom parser. [ User and Entity Behavior Analytics (UEBA) Software ](https://www.g2.com/tags/user-and-entity-behavior-analytics-ueba-software)[ Security Information and Event Management (SIEM) Software ](https://www.g2.com/tags/security-information-and-event-management-siem-software)[ Security Orchestration ](https://www.g2.com/tags/security-orchestration)[ automation ](https://www.g2.com/tags/automation) [ and Response (SOAR) Software ](https://www.g2.com/tags/and-response-soar-software)[ Security Orchestration, Automation, and Response (SOAR) Software ](https://www.g2.com/tags/security-orchestration-automation-and-response-soar-software-0178ac96-a8e8-4cfc-838c-e0d3b050bff2) Show More * * * \<0\>0\>Upvotes * * * 2 Comments [![linkedin](/assets/social-logos/linkedin-afe65e46604a5bd5105ab9c856116204040b6b3f2b2d42562fc8071ca0c48ca0.svg "linkedin")](https://www.linkedin.com/shareArticle?mini=true&summary=Ask+NetWitness+Platform+questions+and+get+answers+from+expert+users+in+our+NetWitness+Platform+Discussions+section.&title=NetWitness+Platform+Discussions+%7C+G2&url=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss) [![twitter](/assets/social-logos/twitter-61aaec80434c71387b8f7326e480592eae71c0a65afd051d66fce9b75a9bf417.svg "twitter")](https://twitter.com/intent/tweet?text=NetWitness+Platform+Discussions+%7C+G2&url=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss&via=G2dotcom) [![facebook](/assets/social-logos/facebook-350d0b410d6b10debcf893050e803a8633d53561aa42807b087b8daf9be3668f.svg "facebook")](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss) [![gmail](/assets/social-logos/gmail-6db42f21e7c254fae201b112bef0dd15d25223a5cbb32691ce80eab43761eadf.svg "gmail")](https://mail.google.com/mail/?view=cm&fs=1&tf=1&to=&su=NetWitness+Platform+Discussions+%7C+G2&body=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss%0aAsk+NetWitness+Platform+questions+and+get+answers+from+expert+users+in+our+NetWitness+Platform+Discussions+section.) [![mail](/assets/social-logos/mail-d55c53b04bf49872e40cd2443b85a99caa23394e6cf154ae32a9d08377c15d86.svg "mail")](mailto:?subject=NetWitness+Platform+Discussions+%7C+G2&body=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss%0aAsk+NetWitness+Platform+questions+and+get+answers+from+expert+users+in+our+NetWitness+Platform+Discussions+section.) ![copy_link](/assets/social-logos/copy_link-05d8dc5dc8576fc78425ad34d07241b060878835e555a30417ff41c18335e575.svg "copy\_link") ## Start a New Software Discussion Have a software question? Get answers from real users and experts [Start A Discussion](/products/netwitness-platform/discussions/new) * * * ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/thumb_square/thumb_square_67ea082c7c83c1aefca7eee09288f99b/netwitness-platform.png "Product Avatar Image") ### Have you used NetWitness Platform before? Answer a few questions to help the NetWitness Platform community [ Yes ](javascript:void(0))[ Yes ](https://www.g2.com/authorize?form=signup&return_to=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fnetwitness-platform%2Fdiscuss%3Fsmall_ask%3Dnetwitness-platform) No ## Top Contributors in NetWitness Platform 1 NG Loading... ### [Neelesh G.](https://www.g2.com/users/4faefaab-34ca-4e46-bfea-6cfbff0776a7 "Neelesh G.") C 1 pt 2 PK Loading... ### [Praveen K.](https://www.g2.com/users/29cc57d5-fb57-44ad-8405-8c8202bacff1 "Praveen K.") Senior Technical Consultant 1 pt 3 ![Vinayak P.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Vinayak P.") VP Loading... ### [Vinayak P.](https://www.g2.com/users/4338e688-b982-4d6c-b7f5-8ee8c3a302e1 "Vinayak P.") Senior Associate Consultant 1 pt