Enable or Disable Lua and Flex Parsing Systems

This topic tells administrators how to enable or disable Lua and Flex parsing systems on a Decoder or Log Decoder. Flex parsers are deprecated and disabled by default.

The settings to enable or disable Lua and Flex parsing systems are configured correctly by default and you do not typically have to change them. However, you may need to adjust these settings at the request of RSA Customer Care or for troubleshooting purposes.

In addition to configuring individual parsers, you can enable and disable all Lua parsing as well as all Flex parsing in the Services Explore view. You enable and disable the Lua parsing and Flex parsing systems settings separately, but they work in the same way.

  • If you disable the Lua or Flex parsing system, the corresponding parsing system is disabled and no parsers are loaded.
  • If you enable the Lua or Flex parsing system, the corresponding parsing system is enabled and individual parsers are enabled and disabled following the current individual configurations.

To enable or disable Lua and Flex parsing systems on a Decoder or Log Decoder:

  1. Go to netwitness_adminicon_25x22.png (Admin) > Services.
  2. Select a Decoder or Log Decoder and netwitness_ic-actns2.png> View > Explore.
    The Services Explore view for the selected service is displayed.
  3. In the Node list, navigate to and select /decoder/parsers/config.

    netwitness_expl-pars-config.png
  4. In the values panel:
    • To enable the Lua parsing system, in the value field for lua.enabled, type yes.
    • To disable the Lua parsing system, in the value field for lua.enabled, type no.
    • To enable the Flex parsing system, in the value field for flex.enabled, type yes.
    • To disable the Flex parsing system, in the value field for flex.enabled, type no.