When a service is first added to Security Analytics, default values for the system configuration parameters are in effect. You can edit these values to tune performance.
In most cases, the default values for compression, statistics update interval, and number of threads in the thread pool are set at a good point for optimal system performance. One parameter that you may want to change for your environment is the SSL setting, which by default is not enabled. When enabled, the security of data transmission is managed by encrypting information and providing authentication with SSL certificates.
To edit system configuration parameters:
- In the Security Analytics menu, select Administration > Services.
- In the Services view, select a Decoder or Log Decoder and >View > Config.
The Services Config view for the selected service is displayed.
- Under System Configuration, click a field that you want to edit, and type a new value.
- When finished editing, click Apply.