Log Collection Service System View

A Log Collector is a service that runs on a Log Decoder host (referred to as a Local Collector) or sends events from a Remote Collector to a Local Collector, and is configured and managed in a similar way to a Log Decoder.

To access the Log Collection Service System view, go to netwitness_adminicon_25x22.png (Admin) > Services and select a Log Collector service, then select View > System.


This workflow illustrates the basic tasks needed to start collecting events through Log Collection.


What do you want to do?

Role I want to ... Documentation


Perform basic Log Collection implementation

Basic Implementation


Set up a lockbox to maintain lockbox settings

Set Up a Lockbox


*Start Log Collection Services.

Start Collection Services


Configure Log Collection protocols and event sources.

Configure Collection Protocols and Event Sources


Verify that Log Collection is working.

Verify That Log Collection Is Working

*You can perform this task here.

Related Topics

Basic Implementation

Quick Look

From the Log Collector Service Information Toolbar, you can manage event data using the Collection icon to start event data from a stopped protocol or stop collecting data from a started protocol. From the Host Tasks icon, you can select tasks that you want to run. You can also shutdown your service and reboot your service from the Service Information Toolbar.