The Services Config view (ADMIN > Services > select Archiver service and select >View > Config) provides a way to manage basic service configurations, configure aggregate services, configure log retention and storage, edit service configuration files, and configure the appliance service for an Archiver.
This workflow illustrates the end-to-end installation and configuration process for an Archiver.
*You can perform this task in the current view.
The Services Config view has four tabs and three panels.
|1||General tab provides a way to manage basic Archiver service configuration.|
|2||Data Retention tab provides a way to view and edit collections and retention rules.|
|3||Files tab allows you to edit enables you to edit the service configuration files for the Archiver as text files|
|4||Appliance Service Configuration tab provides a way to configure an Archiver service.|
|5||Aggregate Services panel provides a way to start and stop aggregation, as well as add, edit, delete, and toggle an aggregate service.|
|6||Aggregation Configuration panel provides configuration settings that affect various aspects of the aggregation process.|
|7||System Configuration panel provides a way to manage service configuration for an Archiver service.|
The General tab contains the following sections:
- Aggregate Services
- System Configuration
- Aggregation Configuration
The Aggregate Services section provides a way to start and stop aggregation, as well as add, edit, delete, and toggle an aggregate service.
When you add an Archiver service, default values are in effect. RSA designed the default values to accommodate most environments and recommends that you do not edit these values because it may adversely affect performance. The following table describes the System Configuration parameters.
Determines the minimum amount of bytes before a message is compressed. If set to zero, messages are not compressed.
Determines the port used by the service.
|SSL FIPS mode|| |
If enabled, all the data transferred in the network will be encrypted using SSL.
|SSL Port|| |
Indicates the port used for encrypting using SSL.
|Stat Update Interval|| |
Determines how often (in milliseconds) statistic nodes are updated in the system.
Determines the number of threads in the thread pool to handle incoming requests.
The Aggregation Configuration section contains the following sections:
- Aggregation Settings
- Service Heartbeat
The Aggregations Settings section has the following parameters.
|Aggregate Autostart|| |
If enabled, data aggregation will automatically restart after a service restart.
|Aggregate Hours|| |
Determines the maximum number of hours a service is allowed to start aggregation.
|Aggregate Interval|| |
Determines the minimum number of milliseconds before another round of aggregation is requested.
|Aggregate Max Sessions|| |
Determines the number of sessions to aggregate on each round.
The Service Heartbeat section has the following parameters.
|Heartbeat Error Restart|| |
Determines the number of seconds to wait after a service error before attempting a service reconnect.
|Heartbeat Next Attempt|| |
Determines the number of seconds to wait before attempting a service reconnect.
|Heartbeat No Response|| |
Determines the number of seconds to wait before taking unresponsive service to offline.
The Files tab in the Service Config view enables you to edit the service configuration files for the Archiver as text files. The files available to edit vary depending upon the type of service being configured.
The following files are common to all core services:
- Service index file
- NetWitness file
- Crash reporter file
- Scheduler file
- Feed definitions file
For more information on the Files tab, see the "Files Tab" topic in the Host and Services Getting Started Guide.