The system properties section affects how the Agent will behave depending on what role it has taken i.e Management,IndexStore,Forwarder,Indexer
| Property |
Value |
| agent.role |
See the page Zonese.g dev.Manager or dev.Indexer |
| vso.base.port=11000 |
The base port from which port allocation will commence |
| net.name.based |
net.name.based=true make the system use the hostname instead of the ipAddress (support for NAT) |
| net.iface |
net.iface allows a specific network interface to be specified, i.e. net.iface=eth1 - This setting is used to guarentee the correct interface is used allowing bi-directional communication between agents. |
|
Security Properties
|
| cert.keystore.file=$PATHTO/keystore |
This points to the Java Keystore (JKS). If the public.key or private.pem is not present the agent will look for keys in the JKS |
| cert.keystore.pass=$PASSPHRASE |
The $PASSPHRASE to access the keystore. |
| cert.keystore.alias=certalias |
The alias used for keys in the keystore |
| private.cert=$PATHTO/cert |
Location of the private key. The full path needs to be used. |
| public.cert=$PATHTO/pub.key |
Location of the public key. The full path needs to be used. |
| web.app.port |
The dashboard will bind to this port on start up.The default value is 8080 |
| jmx.pwd |
The default password for access to an agents jmxHttpURL is ll4bs.Set jmx.pwd to your password of choice. |
|
User and Session Properties
|
| ldap.user.field |
Default Value: uid
Update this to change the field that Logscape will use to identify a user in your LDAP Server.
|
| user.default.role |
Default Value: Read_Write_User
Default permissions a user will have when imported. Possible values
- Read_Only_User
- Read_Write_User
- Team_Administrator
- System_Administrator
|
| user.default.team |
Default Value: all
Default team a user will belong to when imported.
|
| logscape.session.timeout.days=7 |
|
|
Service Memory
|
| dashboard.heap |
dashboard.heap controls heap/mem allocated to the WebDashboard. [512M] increased with concurrent use.Ideal[1256M] or more |
| logspace.heap |
logspace.heap control heap/mem allocated to the LogSpace Service [256M] Ideal[1256M] or more |
| aggspace.heap |
aggspace.heap controls heap/mem allocated to the Aggregation Engine. [512M] Ideal[1256M] or more |
| printserver.concurrent=3 |
The number of concurrent report services to run when alerts are being triggered |
|
|
| search.flush.ms |
search.flush.ms (default 500ms) - interval when to pump aggregate events resulting from AggFunctions (count, avg etc) |
| replay.flush.ms |
replay.flush.ms (default 200ms) - determines latency when flushing raw-event data on a search |
|
OTHER
|
|
PRIORITY
|
This property modifies the process priority on Linux, Windows, Solaris and OS X. Logscape can be set t run with LOW or NORMAL priority |
| vscape.tcp.client.connection.outstanding.limit=5 |
Limits the number of concurrent connections handled by a client endpoint. Default: 5 connections |