The Files tab in the Services Config view is the user interface for editing service configuration files—Decoders, Log Decoders, Brokers, Archivers, and Concentrators—as text files.
The files available to edit vary depending upon the type of service being configured. The files that are common to all Core services are:
- The service index file.
- The netwitness file.
- The crash reporter file.
- The scheduler file.
- The feed definitions file.
In addition, the Decoder has files that configure parsers, feed definitions, and a wireless LAN adapter.
Note: The default values in these configuration files are generally good for the most common situations; however, some editing is necessary for optional services, such as the crash reporter or scheduler. Only administrators with a good understanding of the networks and the factors that affect the way services collect and parse data should make changes to these files in the Files Tab.
More detail on the service configuration parameters is available in the Service Configuration Settings.
To access the Files tab:
- In the Security Analytics menu, select Administration > Services.
- Select a service and select > View > Config.
The Services Config view is displayed with the General tab open.
- Click the Files tab.
This is an example of the Files tab.
Files Tab Toolbar
The Files tab has a toolbar and an edit window. This is an example of the toolbar.
These are the features of the Files tab toolbar.