Appendix B: Index Inspect

Appendix B: Index InspectAppendix B: Index Inspect

The NetWitness Core database index has a built-in debugging feature called inspect that provides detailed information about the composition of its indexes. The index inspect feature is located at /index/inspect in every Core service configuration tree. Services that do not actually have an index, like Broker, do not have the /index/inspect feature.

ParametersParameters

Options

Type: String This parameter may be set to the value all-slices to collect inspect information about every slice in the index. If it is not set, information on the current, most recently created slice is returned.

Collecting information on all slices may take a very long time to complete if there are many index slices.

ResponseResponse

Inspect returns many rows of key value pairs that represent the state of the index.

Slice SummarySlice Summary

The first row returned for every slice is a summary with the following values.

Per-Index SummaryPer-Index Summary

There will be per-index summary rows returned for each index. Only value-level indexes are reported.

Slice Summary FooterSlice Summary Footer

The last row in each inspect report contains cumulative statistics for all the indexes in the slice.