This topic lists and describes the available configuration parameters for RSA NetWitness Suite Log Decoders.
Log Decoder Configuration Settings
This table lists and describes the Log Decoder configuration settings.
Log Tokenizer Configuration Settings
The log decoder has a set of configuration items that control how the automatic log tokenizer creates meta items from unparsed logs. The log tokenizer is implemented as a set of built-in parsers that each scan for a subset of recognizable tokens. The functionality of each of these native parsers is shown in the table below. These word items form a full-text index when they are fed to the indexing engine on the Concentrator and Archiver. By manipulating the parsers.disabled configuration entry, you can control which Log Tokenizers are enabled.
These are the Log Tokenizer configuration parameters.