A Log Decoder is a special type of Decoder, and is configured and managed in a similar way to a Decoder. Therefore, most of the information in this section refers to both types of Decoders. Differences for Log Decoders are noted.
The following figure depicts the workflow for common Decoder configuration tasks with the steps you can complete in this view highlighted.
|User Role||I want to...||Documentation|
|Administrator||configure capture settings||Configure Capture Settings|
|Administrator||manage parsers and log parsers||Enable and Disable Parsers and Log Parsers|
start and stop data capture*
|Administrator||upload packet capture and log files*||Upload a Log File to a Log Decoder |
Upload a Packet Capture File
reset log stats, perform host tasks, shutdown the service, shutdown the appliance service, and reboot the host*
Hosts and Services Getting Started Guide
|Administrator||configure rules||Configure Decoder Rules|
*You can complete these tasks here.
Go to the Master Table of Contents to find all RSA NetWitness Platform 11.x documents.
- Decoder and Log Decoder Quick Setup
- Configure Common Settings on a Decoder
- "Services System View" in the Hosts and Services Getting Started Guide
This is an example of the Services System view for a Decoder.
This is an example of the Services System view for a Log Decoder.
Service Info Toolbar
These two toolbars illustrate the options specific to Decoders and Log Decoders.
In addition to the common options in the Services System view toolbar, you can start and stop capture of packets or logs. The upload file options are different for the standard Decoder (packet capture file) and the Log Decoder (log file).
|Upload Packet Capture File||Displays a dialog that provides a way to select a packet capture (.pcap) file for upload to the selected Decoder. For more information, see Upload a Packet Capture File.|
|Upload Log File||Displays a dialog that provides a way to select a log (.log) file for upload to the selected Log Decoder. For more information, see Upload a Log File to a Log Decoder.|
|Start/Stop Capture||Starts packet capture on the selected Decoder. When packet capture is in progress, the option in the toolbar changes to Stop Capture, and the option to upload a file is unavailable.|