Skip navigation
All Places > Products > RSA NetWitness Platform > RSA NetWitness Platform Online Documentation > Documents
Log in to create and rate content, and to follow, bookmark, and share content with other members.

Decoder: Services System View - Decoders

Document created by RSA Information Design and Development Employee on Sep 13, 2017Last modified by RSA Information Design and Development Employee on Jan 6, 2021
Version 26Show Document
  • View in full screen mode

A Log Decoder is a special type of Decoder, and is configured and managed in a similar way to a Decoder. Therefore, most of the information in this section refers to both types of Decoders. Differences for Log Decoders are noted.

To reach the Services System view, go to (Admin) > Services > select a Decoder or Log Decoder > The actions icon > View > System.


The following figure depicts the workflow for common Decoder configuration tasks with the steps you can complete in this view highlighted.

Decoder configuration workflow, with Start and Stop Capture highlighted

What do you want to do?

User RoleI want to...Documentation
Administratorconfigure capture settings Configure Capture Settings
Administratormanage parsers and log parsers Enable and Disable Parsers and Log Parsers


start and stop data capture*

Start and Stop Data Capture

Administratorupload packet capture and log files* Upload a Log File to a Log Decoder
Upload a Packet Capture File


reset log stats, perform host tasks, shutdown the service, shutdown the appliance service, and reboot the host*

Hosts and Services Getting Started Guide

Administrator configure rules Configure Decoder Rules

*You can complete these tasks here.

Related Topics

Go to the Master Table of Contents to find all RSA NetWitness Platform 11.x documents.

Quick Look

This is an example of the Services System view for a Decoder.

Services System Decoder View

This is an example of the Services System view for a Log Decoder.

Services System Log Decoder View

Service Info Toolbar

These two toolbars illustrate the options specific to Decoders and Log Decoders.

Services System Toolbar Decoder

Services System Toolbar Log Decoder

In addition to the common options in the Services System view toolbar, you can start and stop capture of packets or logs. The upload file options are different for the standard Decoder (packet capture file) and the Log Decoder (log file).

Upload Packet Capture File Displays a dialog that provides a way to select a packet capture (.pcap) file for upload to the selected Decoder. For more information, see Upload a Packet Capture File.

Note: This option does not apply to Log Decoders.

Upload Log File Displays a dialog that provides a way to select a log (.log) file for upload to the selected Log Decoder. For more information, see Upload a Log File to a Log Decoder.
Start/Stop Capture Starts packet capture on the selected Decoder. When packet capture is in progress, the option in the toolbar changes to Stop Capture, and the option to upload a file is unavailable. 

You are here
Table of Contents > Decoder and Log Decoder References > Services System View - Decoders