About the configuration file (Kaspersky CyberTrace Service)

Kaspersky CyberTrace Service reads settings from a configuration file.

Editing the configuration file

If the configuration file is absent or does not follow the rules specified in this section, Kaspersky CyberTrace Service does not start and prints an error message.

To avoid potential issues, make a backup copy of the Kaspersky CyberTrace Service configuration file before you make any changes in the file. If Kaspersky CyberTrace does not work properly after you have reconfigured Kaspersky CyberTrace Service, replace the configuration file with its backup copy.

Applying changes made to the configuration file

You have to reload the configuration file or restart Kaspersky CyberTrace Service after you edit the configuration file for the changes to take effect.

You can apply changes made to certain elements of the configuration file by reloading the configuration file but without restarting Kaspersky CyberTrace Service.

These elements include:

• InputSettings > RegExps
• Feeds
• OutputSettings > RecordFieldContextFormat
• OutputSettings > AlertFormat
• OutputSettings > EventFormat

To reload the configuration file without restarting Kaspersky CyberTrace Service,

Run the script for managing Kaspersky CyberTrace Service with the reloadconfig option.

To apply changes made to other elements of the configuration file, you have to restart Kaspersky CyberTrace Service.

To restart Kaspersky CyberTrace Service,

Run the script for managing Kaspersky CyberTrace Service with the restart option.

Configuration file location (Linux)

In Linux, the configuration file used by Kaspersky CyberTrace Service can be specified in the following ways:

• When Kaspersky CyberTrace Service is started from the command line, the path to a configuration file can be specified as an argument. By default, this path is ../etc/kl_feed_service.conf.
• When Kaspersky CyberTrace Service is managed using the script, the path to the configuration file is specified in the script parameters. By default, this path is %service_dir%/etc/kl_feed_service.conf.

Configuration file location (Windows)

The configuration file used by Kaspersky CyberTrace Service is named kl_feed_service.conf and resides in the same directory as the Kaspersky CyberTrace Service binary file.

Case sensitivity

All the names used in the configuration file (for example, pattern names or feed fields) are case-sensitive.

Using special characters

To use special characters (for example, an ampersand or angle brackets) in regular expressions and other parameters, enclose the text of the elements in a CDATA section.

The following example uses braces around parameters: