Configuration Variables

This topic explains the purpose and structure of the AppConfig.yaml file used by BigFix UI. This configuration file enables administrators to manage application behavior and environment-level settings.

The BigFix UI supports a set of configuration variables that administrators can enable or disable to adjust functionality. These variables let you fine-tune the environment, enable advanced reporting features, or provide additional controls to end users.

Configuration variables are typically set in the application configuration file or as part of the environment setup. Once applied, the changes take effect immediately and influence how the application behaves.

The file follows YAML (YAML Ain’t Markup Language) syntax, which uses indentation to define hierarchy. Each setting is represented as a key–value pair that determines specific application behavior. Maintaining correct indentation and data types (for example, Boolean, string, or integer) is essential for proper operation.

Purpose

The AppConfig.yaml file lets administrators enable, disable, or customize BigFix UI features without modifying the underlying code or restarting the entire environment. These variables help configure system behavior, report management, and feature access dynamically.

Configuration Variables Reference

Table 1. Settings
Key Property Name Data Type Default Value Description
Settings AllowCustomJsonDefinitionReportsView bool false Shows the View report tab and the View report button, where you preview the output of a scripted report. Works together with AllowCustomJsonDefinitionReportsExecution. If either setting is false, the tab and the button are hidden.

If this flag is false then "reports created from scripted reports app" will be excluded from report list in all reports page.
Settings AllowCustomJsonDefinitionReportsCreation bool false Lets you save or edit scripted reports. If this setting is false, the Save Report button stays disabled.
Settings AllowCustomJsonDefinitionReportsExecution bool false If the flag is true, Shows the View report tab and the View report button, where you preview the output of a scripted report. Works together with AllowCustomJsonDefinitionReportsView. If either setting is false, the tab and the button are hidden.
Settings AllowUseQna bool true Shows the QnA tab, where you evaluate Relevance expressions. If this setting is false, the QnA tab is hidden.
Settings LogVerbose bool false Enable to print debug logs; disable to hide them.
Settings LogAuditToSeparateFile bool true Enable to print Audit logs in a dedicated log file separate from main Application logs; disable to hide them.
Settings LogConsoleOnlyMsg bool false Enable to log only to console; disable to log to console and file
Table 2. AppConfig
Key Property Name Data Type Default Value Description
AppConfigType ByPassCertificateVerification bool true Enable to skip SSL/TLS certificate checks; disable to enforce verification.
AppConfigType WebServer string 127.0.0.1 Web server host/address to bind (e.g., 0.0.0.0, localhost).
AppConfigType CorsAllowedOrigins string * List of allowed origins for CORS requests. The default value * (all origins) is intended for initial setup only; set the allowed origins according to your organization's security policy before production use. For guidance, see CORS allowed origins configuration.
AppConfigType FIPSModeEnabled string "off" Enables FIPS-compliant Cryptography;Important for deployment that must meet US government Standards
AppConfigType DBConnectionMaxRetries int 100 Maximum retries for database connection on failure.
AppConfigType DBConnectionBackoffInterval int 2 0, 1, 2 correspond to immediate, short, and long backoff intervals between DB retries
AppConfigType DBConnectionMaxBackoffInterval int 4 sets the max DB retry backoff.
AppConfigType DbSchemaName string bfui Name of the database schema the application will use.
AppConfigType LogMaxSizeMb int 10 Maximum size (in MB) of a log file before it is rotated.
AppConfigType LogMaxBackups int 100 Maximum number of rotated log files to keep.
AppConfigType LogMaxAgeDays int 15 Maximum number of days to retain old log files before deletion.
AppConfigType LogCompression bool true Enable to compress rotated log files; disable to keep them uncompressed.
AppConfigType LogFormatJSON bool false Enable to output logs in JSON format; disable for plain text logs.
AppConfigType AccessTokenDurationInMins int 15 Duration in minutes before an access token expires.
AppConfigType RefreshTokenDurationInMins int 30 Duration in minutes before a refresh token expires.
AppConfigType EnableRenewalRefreshToken bool true Controls automatic renewal of refresh tokens when users request a new access token near expiration.
AppConfigType AutoRenewalRefreshTokenTimeInMins int 10 Time, in minutes, before refresh token expiration at which the token is automatically renewed. Applies when EnableRenewalRefreshToken is set to true.
AppConfigType DisableJobLogs bool false Enable to turn off job execution logging and reduce log volume; disable when troubleshooting job-related issues.
AppConfigType EnableDynamicPortSelectionIfInUse bool false Enable to allow the NATS JetStream server and other microservices to automatically find and bind to an available port if the configured port is already in use.
Note: If the default port is busy or occupied in your environment, you can enable dynamic port selection. When active, the system will automatically allocate and start on a new available port within the 8,000 to 9,000 port series.
AppConfigType EmailMaxIndividualRecipients int 50 Maximum number of individual recipients that a user can add to an email notification, such as the Email to list of a scheduled report.
Table 3. AsyncConfig
Key Property Name Data Type Default Value Description
AsyncConfig AsyncReportExpirySeconds int 900 Time, in seconds, after which a completed asynchronous report expires and is removed from the cache.
AsyncConfig AsyncReportWorkerCount int 8 Number of workers that process asynchronous report requests in parallel.
AsyncConfig AsyncReportWorkerTimeoutSeconds int 1800 Maximum time, in seconds, that an asynchronous report worker can run before it times out.
AsyncConfig AsyncReportsConsumerLag int 50 Maximum number of pending requests (consumer lag) allowed in the asynchronous reports queue.
AsyncConfig CachePurgeFrequencyMinutes int 180 Frequency, in minutes, at which expired asynchronous reports are purged from the cache.
AsyncConfig LagMonitorIntervalSeconds int 300 Interval, in seconds, at which the consumer lag of the asynchronous reports queue is monitored.
AsyncConfig MaxAsyncReportsPerUser int 4 Maximum number of asynchronous reports that a single user can run concurrently.

This will be applicable only when you do bulk processing, which will be upcoming in the future.
Table 4. SiteGatherSettings
Key Property Name Data Type Default Value Description
SiteGatherSettings FileExtensionsToGather string ".brpt" File extensions that the site gather service retrieves from external sites. The service gathers each matching report definition.
SiteGatherSettings PollingIntervalMinutes int 720 Interval, in minutes, at which the site gather service polls external sites for new or changed content. The service compares file hashes and downloads only the files that changed.
SiteGatherSettings SiteToFilter string "All" Sites that the service gathers from. The default value "All" gathers from every subscribed external site.
Table 5. LockBoxConfig
Key Property Name Data Type Default Value Description
LockBoxConfigType Port int 9010 Port number used by the LockBox service.
LockBoxConfigType WebServer string 127.0.0.1 Web server host/address to bind (e.g., 0.0.0.0, localhost).
LockBoxConfigType IntegrityAuditFrequencyInMinutes int 1440 Frequency, in minutes, of automated integrity audits that check all protected tables for data tampering.
Table 6. ColMgrConfigs
Key Property Name Data Type Default Value Description
ColMgrConfigs ContextTimeoutSeconds int 60 Maximum time, in seconds, allowed for a Collection Manager request context before it is cancelled.
Table 7. ColMgrSettings
Key Property Name Data Type Default Value Description
ColMgrSettings EnableLegacyScriptedReportsCreateAndModify bool false Allows creating and modifying legacy scripted reports in the Collection Manager.
ColMgrSettings RelevanceQueryMaxProperties int 20 Maximum number of properties allowed in a single relevance query.
ColMgrSettings RelevanceQueryMaxPropertyLength int 500 Maximum length, in characters, of each property in a relevance query.
Table 8. AuthConfigs
Key Property Name Data Type Default Value Description
AuthConfigs port int 9012 Handles authentication, token generation, and validation.
AuthConfigs BESUserCompositionPollingIntervalInMin int 5 Interval, in minutes, at which BigFix UI polls the BES server for changes to BES user composition.
Table 9. NotifConfigs
Key Property Name Data Type Default Value Description
NotifConfigs Port int 9224 Notification service starts on this port and enables notification center.
NotifConfigs KeepaliveIntervalSeconds int 15 Interval, in seconds, at which keepalive messages are sent to maintain open notification connections.
NotifConfigs NotifSoftDelIntervalMinutes int 240 Interval, in minutes, at which notifications are soft deleted (marked as deleted but retained in the database).
NotifConfigs NotifHardDelIntervalMinutes int 1440 Interval, in minutes, at which soft-deleted notifications are permanently removed from the database.
Table 10. DataService
Key Property Name Data Type Default Value Description
DataServiceConfig port int 9019 Data Service — is the central data layer for managing and serving data to subsystems like FixletStreams, PLA, and CyberFocus.
Table 11. OSConfigs
Key Property Name Data Type Default Value Description
OSConfigs port int 9020 OsConfigs - Orchestration Service, Orchestration service orchestrates fixletstreams by scheduling and triggering them at the defined times.
OSConfigs MaxConcurrentOrchEngineWorkers int 10 Maximum number of concurrent orchestration engine workers that process queued jobs.
OSConfigs OrchEngineTickerIntervalSeconds int 60 Polling interval, in seconds, for the orchestration engine queue scan.
OSConfigs OrchWorkerTimeoutInMinutes int 5 Maximum runtime, in minutes, for a single orchestration worker before its context is cancelled.
OSConfigs ScheduledReportAccessTokenExpirationHours int 720 Lifetime, in hours, of scheduled report access tokens. Tokens embedded in scheduled report email notifications become invalid after this duration. The default value is 720 hours (30 days).
OSConfigs ScheduledReportsQuotaPerUser int64 10485760 Per-user storage quota, in bytes, for scheduled report archives that the orchestration service generates. The default value is 10485760 bytes (10 MB).
Table 12. FileServerConfig
Key Property Name Data Type Default Value Description
FileServerConfig MaxUploadSizeBytes int64 5368709120 Maximum allowed file upload size, in bytes. The default value is 5368709120 bytes (5 GB).
FileServerConfig AllowedExtensions string * Comma-separated list of file extensions that the file server accepts. Use * to allow all file types.
FileServerConfig StoragePath string None Storage path for uploaded files. Specify an absolute path to the directory where the file server stores files.
FileServerConfig IPACL string 127.0.0.1 List of IP addresses that can access the file server download endpoint. Specify the IP addresses of the root servers that are permitted to download files.
Table 13. Miscellaneous Configs
Key Property Name Data type Default value Description
LbUnsecureConfigs port int 9011 Handles unsecured load balancer service that routes HTTP traffic between internal components.
RnsConfigs port int 9013 Relay Notification Service — manages event propagation and notifications.
sqlRetConfigs port int 9016 SQL Return Service — handles SQL-based queries, fixlet streams, or analytics results.
ExpRetConfigs port int 9018 Export/Reports Return service — processes and serves reporting data.
DexRetSettings MaxConcurrentCalls int 8 DEX Retriever Service — maximum number of concurrent calls that the DEX Retriever service can process.
IvrRetConfigs Port int 9078 IVR Retriever Service — port number reserved for the IVR Retriever service.
ScmRetConfigs Port int 9079 SCM Retriever Service — port number reserved for the SCM Retriever service.
SwdRetConfigs Port int 9080 SWD Retriever Service — port number reserved for the SWD Retriever service.
BfiRetConfigs Port int 9082 BFI Retriever Service — port number reserved for the BFI Retriever service.
WkflRetConfigs Port int 9083 Workflow Builder Retriever Service — port number reserved for the Workflow Builder Retriever service.
PatchRetConfigs Port int 9084 Patch Retriever Service — port number reserved for the Patch Retriever service.

Editing Configuration Variables

  1. Navigate to the data\config\ folder in your BigFix UI installation directory.

    For a default installation, this is C:\Program Files (x86)\BigFix Enterprise\BES UI\data\config\.

    If you specified a custom directory during setup, this is <custom_install_path>\data\config\.

  2. Open the AppConfig.yaml file in a text editor such as Notepad++ or VS Code.

  3. Locate the relevant section and modify the desired property.

  4. Save the file.

  5. Restart the BigFix UI service for the changes to take effect.

    Note:

    Most variables in the Settings section of the AppConfig.yaml file take effect as soon as you save the file. Scripted reports flags are the exception. If you add, change, or remove a scripted reports flag, restart the BigFix UI service.

Note:
  • Use lowercase Boolean values (true or false).
  • Verify correct YAML indentation; syntax errors can prevent startup.
  • Back up the configuration file before editing.
  • Apply changes before starting the application.