Contents
This section contains an overview of the pages of the Web Administration Interface. Detailed configuration options will be covered in separate topics.
Login and start screen
After logging in using an administrator user and the corresponding password (see Default username & password and Explaining the Console), a screen with several widgets is presented.
The upper left is a panel in which you can start/stop/restart the essential services.
- Index: the indexer process. When stopped, the appliance will not display any documents.
- Spiders: the spiders which will find (new) information and documents.
- Processing: the parsers and converters. Including OCR engine.
In the middle the statistics of the index are shown for informational purposes. Item 'parents' are mails that are at the root of a thread, zip files that contain items, etc. etc.
Not-indexed documents are documents Indica couldn't read. Reasons for this are most likely rights issues, encryption or corruption of files.
Top right is the current indexer progress with current collection name, time stats and numbers.
Bottom left, all the enabled modules and some information are shown.
Normally, all modules except the Forensic Module are activated. The Forensic Module is a special expert module normally not needed for operation. Sending an email to [email protected] will answer your questions about activation.
At the bottom to the right you can see some information regarding the system itself.
Users screen
System → Users & apps
At this screen the main 'administrator' user's password can be changed or reset. Keep in mind See also Default username & password for the default password and Explaining the Console on how to change the password from the console.
If needed, additional users can be created by clicking 'add new'.
Different roles can be assigned to users. Clicking 'reset' will send a reset link to the user. If that's not possible, a new password can be entered by clicking 'New'.
Networking
System → Networking
Network interface
The network settings of the appliance can be changed here. See also Explaining the Console to change these settings from the console.
In this section you can choose either to configure the network manually or to have it set using DHCP. Change the setting and press 'save'.
Mailer settings
In this widget, the mailer can be configured. This is needed, so the appliance has a way to send mails regarding updates, notifications and password resets.
Zabbix monitoring
Zabbix plugin settings can be set here. Enter your Zabbix instances IP address and the case-sensitive name of the appliance. Then, in you Zabbix instance, add a host with the same case-sensitive name for monitoring basic metrics of the appliance.
SSL Settings
To force the appliance to use an SSL certificate for extra security, check the box and press 'save'.
The appliance uses a self-signed SSL certificate. Please contact your reseller to configure the appliance for a specific SSL certificate.
Software
System → Software & updates
Updates
The appliance can automatically update to the newest version whenever an update or patch is made available.
If this is not desirable turn it off and press 'save'.
To take advantage of the latest updates and bug-fixes, it is advised to have the appliance updated automatically.
Module activation
After contacting [email protected] a new activation key can be obtained. By entering this key, new functionality can be unlocked.
Software version
This section shows the current software version. When a new version becomes available, this will be shown here.
Look and feel
System → Look & feel
Logo
Upload a new logo or reset to the original. Logo must be a PNG file of max 250x50px and 20Kb size.
Navigation bar and text colors
Enter new colors of the nav-bar and text using Hex codes or choose using the colorpicker. Check the box to reset to default colors.
Language
The front-end language can be set to:
- english
- dutch
- french
- german
Logging
System → Logging
In the 'logs' tab, essential logging can be found. Standard, the page will be load 100 lines. 200 and 500 can be chosen too.
Query log
The query log shows all queries and the results, including users and specific queries.
Indexer log
The indexer log will show all indexer, spider, mounting, web spider, email information and errors. It will also show spider and indexer status.
Not indexed file log
This file log shows the amount of files not indexed, and which files they are. Most probably these files aren't indexed due to encryption, corruption or rights issues.
Mailgetter log
This file log shows information and potential issues about the mail getter.
Search engine log
This log shows issues about the search engine. Most of the time this will be empty.
General Settings
System → General Settings
General settings are mainly settings to be done before indexing. These are useful for (forensic) research or other projects. It will speed up the indexing process, or change the way the appliance behaves.
User internal user DB?
This will allow the appliance to use its internal user DB as main authentication source. Users can be administered through the Users&Apps section.
When enabled, an external directory is not needed to allow authenticated users to use the appliance.
Use first folder as Facet or Custodian name
After enabling this option, the first folder on fileshares is used to create facets on the left of the search screen. This is convenient when data is split into custodians.
Enable Stemming?
Stemming can be enabled by choosing the language needed. The indexer will be restarted and a reindex is strongly advised.
Only index email meta data?
By enabling this option, a quick process can be run on an email data source. Only the meta information will be gathered, no actual content. See also the Email section.
Indexer Info
Search & Index → Indexer Info
Indexer stats
Some information about the index and its size shown. Also the number of documents in the index and the number of unreadable documents.
Not-indexed documents are documents Indica couldn't read. Reasons for this are most likely rights issues, encryption or corruption of files.
Indexer progress
Graphical information about the indexer progress is shown on the right. The current collection, number of files and time remaining are shown here.
Actions
The status of the core services of the appliance are shown here. They can be stopped and started here, too.
When you need to clear the index, you can press the 'clear index button'. See also Explaining the Console if you need to reset the appliance to default settings.
Pressing the 'clear index' button, will clear the index and force the appliance to reindex everything depending on the amount of data this may take a long time.
Search
Search & Index → Search Settings
The search tab shows lists of 'stopwords' and 'synonyms'. Also, a list of files to be ignored is present. You can change or update them as needed.
Indexer
Search & Index → Indexer Settings
Inline document viewer
For esthetic purposes, the inline document viewer can be activated or de-activated. The inline document viewer will generate a fast, and usable preview of the documents in the index. This way you do not need to open a separate program to actually see the contents and layout of the document. For slow connections or in case of heavy load on the appliance, it can be de-activated. This will result in a plain text preview of the document content.
Create document previews
The inline document viewer can create documents views on the fly, but this will result in a display delay of a couple of seconds, possibly more when opening a large document. It is also possible to pre-create a document view of all documents during index time. Average disk usage is 1 Mb per document. If you enable this feature, please make sure your appliance has enough disk space.
Activate OCR
The index engine is able to recognize text from images (scans faxes etc.). Enabling the OCR functionality will drastically slow down the index process. Complex scanned documents can may take up to 5 minutes to process! All OCR activity is logged in the indexer log window.
Please note that all time estimates are no longer accurate when the OCR functionality is switched on.
Both creation of documents during index time and OCR will result in longer index time and heavier load on the system. If you change one or both of these settings, please clear the index and have the system re-index all the data. See Sysinfo Screen for more information.
Fileshares
Datasources → Shares
In the Shares section, you can set Windows fileshares, samba (SMB) or CIFS, with or without authentication. Only read-rights are necessary for the share or the user connecting to the share.
Enter the information in the form of \\user\share or \\localhost\usb$ when connecting to a USB drive.
It is advisable to have a dedicated user or service account e.g. 'Indica' for the connection to the shares. This user needs read rights to all the data that the Indica appliance needs to access.
Check the 'make tab' box to have a special 'tab' for this collection of data. When all the information and credentials are correct, the icon will go green after saving.
Sites
Datasources → Sites
To index web sites or intranet sites, enter the information in the 'sites' section.
Enter the name, the site and choose the spider interval (once, daily, weekly).
If basic authentication is required, enter the site's credentials.
You reseller can set up form-based authentication for you if needed.
Check the 'make tab' box to have a special 'tab' for this collection of data.
E-mail Integration
Datasources → E-mail
Email integrations with security set on email owners can only work if Active Directory integration is turned on.
E-mail integration
After enabling the e-mail functionality, the e-mail connectivity can be chosen, either a POP archiving/catch all mailbox or EWS connections.
In order to store the email archive on an external share, please set the share information in the Archiving section.
If mail is enabled and there is no (Active) Directory integration enabled, a custom email domain can be set here too. Default it's set to indica.lan.
POP3 Settings
Please fill in the server name, user name and password of the Catch all email box. The system will connect using the POP protocol, and store the email on the default archive location. You can choose to access it through a separate tab.
All email from the archive POP mailbox will be downloaded and removed from the mailbox.
If needed, enter extra email aliases to the user in the list.
EWS Accounts
Most modern mailservers have EWS API connectivity. To make full use of this, please enter the users and passwords. Choose expand if you want all shared mailboxes too. A special user can be created to spider all the email.
Keep in mind that Indica needs to create an Email archive, so enough storage should be added to the system.
Archive
Datasources → Archive Settings
To enable Archiving of your file data, configure this tab. E-mail archiving is automatically set up when configuring email connectivity.
The default archiving location is on the internal storage, this can be changed to an external CIFS or SMB source.
Archive Location
To archive to an external location, please enter the location in UNC format with forward slashes:
//server/share_name
and its corresponding username and password.
Please make sure the archiving credentials contain a user that has "write and create" rights on the share. If you want to archive to other shared storage than CIFS or SMB, please contact your reseller.
When setting up an external source with incorrect credentials, the appliance will default the archiving to local storage.
Archive Settings
Choose whether to automatically archive the files by selecting 'yes' or 'no'.
Indica will archive files older than the chosen years (default: 7).
If you allow Indica to move the files, they will be removed from the original location and moved to the archive location.
Directory Settings
Connections → AD Settings
Directory Integration
If no directory connection is configured, everyone with access to the appliance will be able to access everything.
By entering a Windows Domain Controller or LDAP server, the appliance can authenticate against the directory and use the user credentials for login and security.
It will also use the directory connection for e-mail rights, e-mail addresses where possible and groups for the datatabs.
Single Sign-on Settings
By checking the box and entering all the settings, real single sign-on can be achieved. The application will try to use the PC's credentials to log on to the directory. If this is not possible, username and password need to be entered manually.
The appliance name must be added to the domain's DNS system, otherwise this won't work properly.
Datatabs
Connections → Datatabs
Datatabs are structured application, data or database connections.
Database connections
Structured data sources can be added, currently .CSV files and raw database connections (MySQL, MSSQL and PostgreSQL) can be added from the admin.
For instance Account or Contact information can be collected from a CRM or ERP system.
Special and custom application connections can be created and supplied by your reseller.
In the configuration wizard, you start by entering read-only account information and a basic query.
Then, the 'important information' can be entered through the query, this will be used for auto-correlation and dynamic entries. Then, the displayed information can be chosen for better overview. Concluding, you can choose which information (for example 'City') can be used for facets.
See Datatab Configuration for more information and configuration help.
Logout
Logout by clicking on the downward arrow in the top-right corner and clicking 'logout'.
