This topic describes the service configuration files that are visible in the Services Config view > Files tab.
The Files tab in the Services Config view is the user interface for editing service configuration files—Decoders, Log Decoders, Brokers, Archivers, and Concentrators—as text files.
The files available to edit vary depending upon the type of service being configured. The files that are common to all Core services are:
- The service index file.
- The netwitness file.
- The crash reporter file.
- The scheduler file.
- The feed definitions file.
In addition, the Decoder has files that configure parsers, feed definitions, and a wireless LAN adapter.
Note: The default values in these configuration files are generally good for the most common situations; however, some editing is necessary for optional services, such as the crash reporter or scheduler. Only administrators with a good understanding of the networks and the factors that affect the way services collect and parse data should make changes to these files in the Files Tab.
More detail on the service configuration parameters is available in the Service Configuration Settings.
To access the Files tab:
- In the Security Analytics menu, select Administration > Services.
- Select a service and select
> View > Config.
The Services Config view is displayed with the General tab open. - Click the Files tab.
This is an example of the Files tab.
Files Tab Toolbar
The Files tab has a toolbar and an edit window. This is an example of the toolbar.
These are the features of the Files tab toolbar.
| Feature | Description |
|---|---|
| File drop-down list | Displays a list of files that the system is currently using. When you select a file, the text of the file is displayed in the text edit window. In the text window, you can edit the file and save the changes, or create alternate files to use. |
| Service / Host drop-down list | Displays the service type and host. You can open a file from either the service or the host for editing. |
 | Retrieves the latest backup of the current file, which can prove useful when you have made changes and want to go back to the previous version of the file. The backup does not replace the current file unless you click Save. |
 | Displays a dialog in which you can select services of the same type and push the currently viewed file to the services. |
| Apply | Overwrites the current file, creates a backup file. |