The Decoder and Log Decoder configuration files are visible and editable in the Services Config view > Files tab. "Edit Core Services Configuration Files" in the Hosts and Services Getting Started Guide provides general instructions for editing files. (Go to the Master Table of Contents for NetWitness Logs & Packets 11.x to find all NetWitness Suite 11.x documents.)
Like other Core services, both the Decoder and Log Decoder have an index file, and may also have a crashreporter, netwitness, and scheduler. The Decoder and Log Decoder index files are named index-decoder-custom.xml and index-logdecoder-custom.xml.
What do you want to do?
- Decoder and Log Decoder Quick Setup
- Create Custom Meta Keys Using a Custom Feed