Host GS: Services Explore View

Document created by RSA Information Design and Development on Nov 7, 2017Last modified by RSA Information Design and Development on Nov 7, 2017
Version 2Show Document
  • View in full screen mode
  

This topic introduces the features of NetWitness Suite Services Explore view, a powerful and flexible user interface for viewing and editing host and service configurations.

The Services Explore View offers advanced access and control of all NetWitness Suite hosts and services. All services expose their functionality through a tree‐like series of nodes, similar to the Windows Explorer view of your file system. Here you can:

  • View a directory tree showing common files for all selected services.
  • Navigate down through the directory to a file.
  • Open the same file for each service, and display the contents side by side.
  • Select an entry in the file and edit the value.
  • Apply a property value from one service to other services.

    The Services Explore View can also display a Properties dialog, a simple interface for viewing properties of any node in the system and sending messages to the node, shown in the figure below.

Caution: A good understanding of the nodes and parameters is required when editing in this view. Incorrect settings can cause performance problems.

Workflow

This workflow shows the tasks you perform from the Explore view.

This workflow shows tasks you perform from the Explore view.

Quick Look

To access the Services Explore view:

  1. In NetWitness Suite, go to ADMIN > Services.
  2. Select a service and select The Actions drop-down menu > View > Explore.

This is the Explore view.

                         
 1  Expand the node to display its parameter categories.
 2  Click a property (for example, meta.dir) to select it.
 3  Right-click a node or category and click Properties to display the Properties dialog.
 4  Perform an operation on a node or category:
  1. Select a command from the drop-down list.
  2. Enter a command string (if required).
  3. Click Send.
 5  Review the output.

Features

The Services Explore View has two main panels:

  • The Node list
  • The Monitor panel

You can access the Properties of any file by right-clicking the file and selecting Properties.

The Node List

The Node list displays the services as a tree-like series of nodes and folders. The levels in the Node list expand and collapse to display the full hierarchy.

This is an example of the node list.

Each root folder is named based on the functionality it exposes. For instance, the /connections folder shows all connected IP addresses. Underneath each IP/Port are two folders, sessions and stats.

  • The sessions folder displays all authenticated user sessions originating from the IP/Port.
  • The stats folder displays values, such as the number of messages sent/received, bytes sent/received, and others, set by the service. These are not editable.

Selecting any folder in the tree view displays its children in the Monitor panel. Every node in the tree is actively monitored, so when a statistic or configuration node changes value, it is immediately reflected in the tree and monitor panel.

The Monitor Panel

The Monitor panel displays properties and values for a selected node (such as index) and a child folder (such as config). There are two ways to edit values:

  • Clicking the value and typing a new value
  • Sending a set message in the Properties dialog

This is an example of the Monitor panel.

Topics

Previous Topic:Files Tab
You are here
Table of Contents > Host GS: References > Services View > Services Explore View

Attachments

    Outcomes