Home
Installation, Deployment, and Upgrade
Installing HCL Discover involves planning and preparing your environment, installing and configuring prerequisite software, obtaining the HCL Discover installation files, and running the HCL Discover installer.
Discover Network Capture Application Manual
Configuring the DNCA
The HCL Discover Network Capture Application can be configured through a web-based console or through the configuration files that are stored on the DNCA server. The following information guides you on how to configure the DNCA.
DNCA configuration files
Configuration settings that are related to the HCL DiscoverNetwork Capture Application are available through the DNCA Web Console or, if needed you can use the vi editor to edit the configuration files that are located in /usr/local/dncauser/etc/.

Installation, Deployment, and Upgrade
Installing HCL Discover involves planning and preparing your environment, installing and configuring prerequisite software, obtaining the HCL Discover installation files, and running the HCL Discover installer.
- Installation and Deployment Manual
- Discover Network Capture Application Manual
  - Discover Network Capture Application Overview
    Network Capture Application from Discover captures and records the complete interaction between the visitor and the web application environment by using a network tap or network switch spanning port. The Network Capture Application software features the following benefits:
  - Installing the Network Capture Application
    The following instructions can be used to assist the installation of your Network Capture Application software.
  - Configuring the DNCA
    The HCL Discover Network Capture Application can be configured through a web-based console or through the configuration files that are stored on the DNCA server. The following information guides you on how to configure the DNCA.
    - Configuration via Web Console
    - DNCA configuration files
      Configuration settings that are related to the HCL DiscoverNetwork Capture Application are available through the DNCA Web Console or, if needed you can use the vi editor to edit the configuration files that are located in /usr/local/dncauser/etc/.
    - Configuration via dcx-conf.xml
    - Configuration using runtime.conf
      Configuration settings that are related to the HCL DiscoverNetwork Capture Application are available through the DNCA Web Console or, if needed, the dcx-conf.xml.
    - SSL Decryption
    - DNCA Discover Command Line Reference
    - Prerequisites
    - Supported Browsers for DNCA Web Console
    - Example Configuration
    - Configuration Steps
    - Open DNCA Web Console
    - Testing Your Configuration
    - DNCA Web Console Login
    - DNCA Web Console Logout
    - Web Console Tabs
    - Configuration
    - Instance Compound Statistics
    - TCP Connections
    - Machine Health
    - Peers
    - Current Per Second Stats
    - Additional DNCA Web Console Debugging Information
    - Use Discover Transport Service as Time Source
    - Deliver Statistics to Discover Transport Service
    - DNCA Web Console - SSL Keys Tab
      You can use this tab to review and edit the Loaded keys list and Missing keys list. To toggle between the lists, use the appropriate radio button:
    - Pipeline Settings
      The Pipeline tab allows users to edit configuration parameters such as capture, limits, and cookie IDs.
    - Capture Type Lists
    - Rule Manipulation
    - Test Manipulation
    - Action Manipulation
    - Key Manipulation
    - Add/Edit Rules
    - Add/Edit Tests
    - Add/Edit Actions
    - Add/Edit Keys
    - Privacy.cfg Reference
    - Logging Changes
    - Reference
    - Stats per Instance
    - Checking on System Health through stats.xml
    - Capture Software Processes
    - DNCA Statistics
    - Heartbeat
    - Auto Settings
    - Remote Monitors
    - Network Interfaces
    - System Utilities
    - Accessing Debug page
    - Page Overview
    - Providing DNCA ZIP to Support
    - DNCA Configuration File dcx-conf.xml
      If you cannot login to the web console, you can edit dcx-conf.xml to configure the HCL Discover Network Capture Application.
    - Configuring Multiple Listend-Routerd Pairs
      Configure Multiple Listend-Routerd Pairs (MLRP) to use multiple NICs to capture network traffic in an environment that produces a high volume of network traffic.
    - Configuring SSL Pools
      You can create SSL pools to group a set of DNCA servers together so that the DNCA servers can share SSL session information.
    - Some SSL hits missing from Firefox browser sessions
    - Beats Tab
      You can use the Beats tab to enable, disable, start, stop, and restart the Filebeat service. Open the DNCA application and access the Beats tab.
  - Upgrade for DNCA
    It is recommended that you always use the latest version of the HCL Discover Network Capture Application suitable for your version of HCL Discover.
  - Packet Forwarder Overview
    The Packet Forwarder is used to capture and forward hits to a cloud-based DNCA that is operating on a virtual machine.
  - SSL Keys
    For decrypting transmissions by using the SSL protocol, the HCL Discover Network Capture Application must be provided the SSL keys in use in the transaction stream.
  - Performance Measurement
    Performance measurement provides details on the Network Capture software performance and timestamp measurements.
  - Configuring DNCA on Red Hat Enterprise Linux™ (RHEL)
    The following sections contain important information for configuring DNCA in a Red Hat Enterprise Linux™ environment:
  - DNCA monitoring
    You can monitor the passive capturing to diagnose performance issues.
  - Overview of DNCA maintenance
    The maintenance utility performs routine maintenance and logging tasks for Discover DNCA. You can use the utility to help maintain the ability of the DNCA to perform DNCA.
  - DNCA frequently asked questions (FAQ)
    The following content contains frequently asked questions or scenarios that can be used to help isolate or fix an issue with your Network Capture Application.
  - Downloading Privacy Configuration
  - Enabling web console access through a single IP address
    You can specify a single IP address which can access the web console. Limiting access to a single IP address helps to prevent unauthorized access through an unknown system.
  - Applying authentication when accessing the web console
    You can improve security by enabling authentication to the web console.
- HCL Discover Session Archiving Installation Guide
  As you prepare for an installation, you need to gather some items, review hardware and software requirements, and then you can perform the installation.
- Discover Upgrade Manual

DNCA configuration files

Configuration settings that are related to the HCL DiscoverNetwork Capture Application are available through the DNCA Web Console or, if needed you can use the vi editor to edit the configuration files that are located in /usr/local/dncauser/etc/.

About this task

dcx-conf.xml: This configuration file contains DNCA configuration settings.
runtime.conf: This configuration file contains custom settings and values for operating system-level configuration. This file can be used to override any of the default setting values that are listed in the Discover.conf file.
Discover.conf: This configuration file contains the default settings and values for operating system-level configuration.
Note: Discover.conf must be assigned read-only permissions for all users. It must never be edited.

Note: When you make configuration changes to your Linux™ installation, apply the changes to the runtime.conf file. runtime.conf supersedes the default Discover.conf file. Discover.conf can be used to revert changes to the default settings if necessary, and it must be configured to be a read-only file.

To change a runtime setting:

Procedure

Copy the entry from Discover.conf.
Paste it into runtime.conf and edit the setting value.
Save runtime.conf and restart the DNCA.