Decoder: Services System View - Decoders

Document created by RSA Information Design and Development on Sep 13, 2017Last modified by RSA Information Design and Development on Oct 11, 2017
Version 6Show Document
  • View in full screen mode
 

A Log Decoder is a special type of Decoder, and is configured and managed in a similar way to a Decoder. Therefore, most of the information in this section refers to both types of Decoders. Differences for Log Decoders are noted.

To reach the Services System view, go to ADMIN > Services > select a Decoder or Log Decoder > The actions icon > View > System.

Workflow

The following figure depicts the workflow for common Decoder configuration tasks with the steps you can complete in this view highlighted.

Decoder configuration workflow, with Start and Stop Capture highlighted

What do you want to do?

                                           
User RoleI want to...Documentation
Administratorconfigure capture settings Configure Capture Settings
Administratormanage parsers and log parsers Enable and Disable Parsers and Log Parsers

Administrator

start and stop data capture*

Start and Stop Data Capture

Administratorupload packet capture and log files* Upload a Log File to a Log Decoder
Upload a Packet Capture File

Administrator

reset log stats, perform host tasks, shutdown the service, shutdown the appliance service, and reboot the host*

Hosts and Services Getting Started Guide

Administrator configure rules Configure Decoder Rules

*You can complete these tasks here.

Related Topics

Go to the Master Table of Contents for Version 11.0 to find NetWitness Suite 11.0 documents.

Quick Look

This is an example of the Services System view for a Decoder.

This is an example of the Services System view for a Log Decoder.

Service Info Toolbar

These two toolbars illustrate the options specific to Decoders and Log Decoders.

Services System Toolbar Decoder

Services System Toolbar Log Decoder

In addition to the common options in the Services System view toolbar, you can start and stop capture of packets or logs. The upload file options are different for the standard Decoder (packet capture file) and the Log Decoder (log file).

                       
ActionDescription
Upload Packet Capture File Displays a dialog that provides a way to select a packet capture (.pcap) file for upload to the selected Decoder. For more information, see Upload a Packet Capture File.

Note: This option does not apply to Log Decoders.

Upload Log File Displays a dialog that provides a way to select a log (.log) file for upload to the selected Log Decoder. For more information, see Upload a Log File to a Log Decoder.
Start/Stop Capture Starts packet capture on the selected Decoder. When packet capture is in progress, the option in the toolbar changes to Stop Capture, and the option to upload a file is unavailable. 

 

You are here
Table of Contents > Decoder and Log Decoder References > Services System View - Decoders

Attachments

    Outcomes