Settings and Management

This section covers SMRTC configuration and monitoring, including node configuration, cluster-wide behavior settings, event source management, statistics, and the firing log.

Two Configuration Levels

SMRTC settings are divided into two independent levels:

Level	Purpose	Where It Is Configured	When It Is Applied
Node configuration	Infrastructure: ports, TLS, keystore, data directories, worker pool size, memory circuit breaker, and logging	The smrtc.yml file on the node	Read once at startup; requires a service restart
Cluster settings	Behavior that is consistent across all nodes	Search Anywhere Framework interface	Replicated across the cluster

Streaming Correlator in Module Settings

In the Search Anywhere Framework interface, the Settings section contains a Streaming Correlator group with four items:

• Statistics - summary performance indicators for the correlator. See Statistics
• Firings - log of rules that fired. See Firings
• Sources - management of the processed source set. See Sources
• Settings - cluster-wide correlator behavior settings. See Cluster Settings

Node Configuration

Reference for SMRTC node configuration parameters in smrtc.yml: networking, TLS, keystore, data directories, memory circuit breaker, and logging.

Cluster Settings

SMRTC cluster settings: overriding values in the Smart Monitor interface and a parameter reference for six behavior groups.

Sources

Configuring SMRTC event sources: aliases, matching patterns, event samples, and incoming event source identification.

Statistics

SMRTC performance indicators: event ingestion, queue load, cluster state, and readiness checks through /health.

Firings

SMRTC rule firing log, statistics for the most frequently firing rules, and firing delivery to Job Scheduler.