Settings.xml Overview
  • 26 Aug 2024
  • 8 Minutes to read
  • Dark
    Light

Settings.xml Overview

  • Dark
    Light

Article summary

The Settings.xml file contains adjustable parameters about server administration within an Installation

Such parameters include the ability to adjust the size of the System Logs, Email Server settings, and settings specific to the database the platform is hosted on. The following document discusses how to access and edit the Settings.xml file.


Locating and Adjusting Settings.xml

The file can be found by navigating to the Decisions Server folder within the primary installation location (typically C:\Program Files\Decisions\Decisions Server).
Settings can be altered as desired by opening the file in a Text Editor and replacing the contents between each open tag and its respective close tag with the desired/applicable value.
 
Many settings use a Boolean value of true or false to indicate whether they are enabled or disabled, whereas others require a more specific configuration.


System Settings Chart

The following table alphabetically lists all settings in the Settings.xml file with default values for a local install.

Setting NameDefault ValueDescription
AllowApiDocAccess (v9.2+ only)FalseAvailable in v9.2 and higher, this setting allows users to expose System Services and Flow Services to API calls.
AllowedFileAccessPaths<blank>Allows to specify File Paths to which the Decisions Server can write files. The primary purpose of this setting is to prevent File Path Traversal.
This setting should be used if users get an error "{FilePath} is outside the allowed directory paths."
AllowedIPAddresses<blank>Prompts for permitted client IP addresses to access the server.
AllowProxyFromFalseToggles permitting proxy headers.
ApplicationNameDecisionsPrompts for a name that any created cookies can use.
AspNetLogsFileCountLimit30Prompts for the maximum number of ASP NET logs to store. Newer logs will override the oldest logs.
AspNetLogsFileSizeLimit104857600 (bytes, i.e., 100MB)Prompts for the maximum size of an ASP NET log file. A log that exceeds this size then rolls over into a new file.
AsyncCheckPeriod2000
AsyncNumChecks7
AutoProfileApiThreshold
InSeconds
-1Prompts for a time duration for API calls that, if exceeded, will turn off the Profiler.
AutoProfileTimespan
InSeconds
90Prompts for a time duration to run the Profiler before stopping.
AutoStartProfilerTrueToggles automatically start the Profiler to capture the session.
CaptureAspNetLogsFalseToggles capturing HTTP requests and responses in a log file saved under /Logs/Asp.NET Core with the prefix "w3clog".
CaptureW3CLogsFalseToggles capturing W3C logs in the log file.
CertificateThumbPrint<blank>Prompts for certificate thumbprint of SSL certificate when using the certificate store option.
ClientStorageQuota1Specifies the client storage quota, limiting the amount of data stored on the client side.
ClusterAddressableIP<blank>Prompts for IP addresses to allow cluster server connections. If blank, then the server is not clustered.
ClusterPortalBaseUrl<blank>Prompts for the Portal base URL of the clustered environment. This should match the Instance URL generated from the Control instance's Add Instance window.

If blank, then the server is not clustered.
ControlInstanceURL
<blank>Prompts for the control instance URL in multi-tenancy environments.
CustomHeadersCustomHeader[] ArrayCheck cross-origin.
Refer to the article Decisions Platform in iFrame for detailed information on the CustomHeaders tag.
DatabaseConnectionString[encrypted value]Prompts for the connection string to the Decisions database.
This is typically defined during installation, but this may be changed. Any changes will be automatically encrypted.
DataBaseType[Supported DB type]Allows selection of the supported database connecting to Decisions. This is typically defined during installation, and changes are generally not recommended.
DefaultDatabaseQueryTimeout60Prompts for a time duration for database queries that, if exceeded, will automatically fail.
DefaultExpireDays7
DefaultSameSiteCookieModeLaxAllows selection of the cookie behavior for the server.
DeniedIPAddresses<blank>Prompts for IP addresses to block access to the Decisions server.
DeploymentLockEnabledFalseToggles block users from creating or modifying any Designer Elements in the server.
DisableAutoSSOSign
InParameter
FalseToggles permitting SSO environment user logins with/without "?AutoSSOSignIn=false" in the URL. If set to true, the parameter will fail and redirect the user to the sign-in SSO page instead.
DuplicateLogMessage
TimingInSeconds
300Prompts for timeout limit.
DynamicLocalModuleLoadingTrueToggles loading local module libraries and their functions into memory.
EnableHSTSFalseToggles restrict all server connections to HTTPS. When set to True, all HTTP connections will be refused.
EnableHTTPTrueToggles using the default web traffic port for connections to the server.
EnableHTTPSFalseToggles using the secure web traffic port for connections to the server.
EnableHTTPToHTTPSRedirectionFalseToggles HTTP to HTTPS redirection for any server connections.
EnableSingleSignOnFalseToggles enable single-sign-on (SSO) for user logins for added security to the instance.
EnableStaleFlowsDataStoreFalseToggles using a datastore for Flow storage in a single node and clustered environment.
EnvironmentNameProductionPrompts for the environment name of the installed instance. This will often match the license.
FileStorageLocationC:\Program Files\
Decisions\FileStorage
Prompts for file path on the local file system to store the server and its files.
ForceBaseUrl<blank>Prompts for SLL termination behind a load balancer when clustering (interlink to Setting up Cluster doc)
FullTextSearchEnabledToggles full text searching in the server.
HideCreatedByOnImportTrueDetermines whether to hide the 'created by' information on import.
HideDetailedErrorMessagesFalseControls whether detailed error messages are hidden.
HideSystemValidationWarningFalseToggles visibility of System validation warnings.
HostingConfiguration
ServerBaseURL
<blank>
HTTPPort8080Prompts for the port number for HTTP connections.
HTTPSCertificateLocationPhysicalFilePathAllows the HTTPS certificate location selection between the file path and the certificate store.
HTTPSCertificatePassword<blank>Prompts for the HTTPS certificate's password.
HTTPSCertificatePath<blank>Prompts for the file path to the certificate on the local file system.
HTTPSPort443Prompts for the port number for HTTPS connections.
IgnoreAllCertificateErrors (removed in v9.3+)FalseToggles respecting certificate errors such as trust errors from self-signed licenses. This setting was removed in v9.3.
InstanceAuthenticationKey
<blank>Prompts for the authentication key are generated from a Control instance's Add Instance window.
InstanceBaseDirectoryC:\Users\[Username]\
Downloads\Instances
Prompts for file path
InstanceNamePrimaryPrompts for the name of the installed server instance referenced in the connection string, e.g., "localhost:80/Primary/".
InterServerCommunicationModeHTTPAllows selection of how objects within the server communicate changes with each other.
Could be internal service calls?
IsMultiTenantServerFalseToggles if the installed server is a Multi-Tenant server. Recommended to edit via the EDIT SETTINGS in the installer.
IsTenantServerFalseToggles if the installed server is a Tenant server. It is recommended to edit via the EDIT SETTINGS in the installer.
LaunchDebuggerOnUnitTestFailFalseToggles initializing the Debugger upon unit test failure
LocallyAddressableIIS
WebsiteIPOrDNSName
localhostusually matches the DNS name on the certificate, used in IIS and clustering install (add in HTTPS IIS docs)
LogAPICallsTaking
MoreThanSeconds
5Prompts for a time duration for API calls that, if exceeded, will be added to the log file for troubleshooting.
LogCheckFieldTypesFalseToggles logging field types checks into the log file.
LogFileMaxSize10485760 (bytes)
The maximum allowed size is 2,147,483,647, aka 2.14 GB 
Prompts for the maximum size of a log file. A log that exceeds this size then rolls over into a new file.
LogFlowStepsTaking
MoreThanMilliseconds
1000Prompts for a time duration for Flow step execution that, if exceeded, will be added to the log file for troubleshooting.
LoginPageAllowedIPs<blank>Prompts for permitted IP addresses for users to log in to the server. 
LogMaxBackups10Prompts for the maximum number of log files to keep.
LogPriorMessagesOnThreadFalse
LogsDirectoryC:\Users[Username]
\Downloads\Logs
Prompts for file path location where server logs are stored in the local file System.
LogSqlStatementsTaking
MoreThanSeconds
5Prompts for a time duration for SQL statements that, if exceeded, will be added to the log file for troubleshooting.
MailDecisionsFramework.Utilities.
Notifications.MailSettings
Enter settings for the server to send email notifications to users and workflow task assignees.

ByPassSmtpServerTrueToggles bypassing below SMTP settings instead of using direct mail. It is not recommended to set it to True unless for testing purposes.

SmtpServerUnknownEnter configuration settings to connect to an SMTP server to the server to send and receive emails.


ClientDomain<blank>Prompts for the address of the SMTP server. It is used to send, receive, and relay outgoing emails between senders and receivers. If blank, then this is not used nor needed in the server.


EncryptedPassword[hidden password]Prompts for the password for the email account specified in the Username setting.


Port25Prompts for the port number of the connecting SMTP email service. 


RequiresAuthenticationFalseToggles user authentication when logging into the SMTP account specified in the Username setting.


ServerAddress<blank>Prompts for the server address of the connecting SMTP email service.


SkipCertificateRevocationCheckFalse

This option will skip all certificate checks if set to True. In general this is not recommended, but in certain test scenarios or for multi-environment configurations, this setting can be useful.



UseImplicitSSL<blank>

By default Decisions expects an Explicit SSL TCP channel. However if the mail server is using an Implicit channel, this may be set to True.



Username<blank>Prompts the SMTP email user account username to log in to manage emails.


UseSSLFalseToggles the secure-sockets layer (SSL) to secure the connection between the server and the SMTP server.
MaintenanceModeFalseToggles setting the server into Maintenance Mode. Any jobs will pause, and only Administrators can log in until this is turned off.
MaxWritableSizeInBytes-1Specifies the maximum size, in bytes, for writable operations. 'MaxWritableSizeInBytes' is set to -1, which suggests that there is no maximum size imposed on writable operations
MSSqlReplication
PublicationName
<blank>
NoLockReadsFalseToggles No Lock allows SQL to read data without regard to locks and other blockers.
NumberOfExclusiveApiThreads1Number of exclusive API threads.    
OfflineFalseIndicates whether the system is in offline mode.
OptimizeDataMemberAccessFalseControls optimization of data member access.
ORMSaveByMergeTrueFlags whether the Object-Relational Mapping (ORM) system should save data by merging changes.
OutputSQLProfileLogFalseThis variable activates the output of SQL profile logs. SQL profiling provides detailed insights into the execution of SQL queries.
PasswordHashEncryptionTypeSHA256Specifies the encryption algorithm used for hashing passwords.
PortalBaseUrlhttp://localhost:80Prompts for URL to the Portal. This is typically defined during installation.
ProductTitle<blank>Prompts for the name of the product.
ProxyFromWhiteList<blank>This setting is a comma-separated list of "protocol://host" values that make up a whitelist. The whitelist defines the addresses (protocols and hosts) the platform allows proxying. If this list is empty and AllowProxyFrom is set to true, it allows proxying from any source.
PushModeEnabled
RecoverablePassword
EncryptionType
DESSets the encryption type for recoverable passwords, such as DES.
RestartStoppedInstancesTrueIf set to true, enables the automatic restart of stopped instances. Automatic restart helps maintain continuous availability and responsiveness.
SecondaryDatabase
ConnectionString
<blank>Prompts for the secondary connection string to the Decisions database. Changes will be automatically encrypted.
SelfHostingVirtual
DirectoryName
<blank>
SendWakeUpUsing
OneWayCall
False
ServerAdministratorEmailsupport@decisions.comPrompts for which email will be contacted by actions such as Send Logs to Support and Send Notification to Server Admin.
ServerHeartBeatInterval
InSeconds
5Prompts for the frequency of server health heartbeats.
ServerName<blank>Prompts for the name of the installed Decisions server.
ServerType[Installation Server Type] Allows selection of the server installation type. Recommended to edit via the EDIT SETTINGS in the installer.
ServiceAccountPassword<blank>
SettingsFileLocationC:\Users\[Username]
\Downloads\..\
FileStorage\Settings
Prompts for file path location of where settings files are stored within the specified File Storage Location setting.
ShareAccountSessionsFalse
ShowDraftModeAppsFalseToggles the visibility of draft apps in the App Store.
ShowUnhandledExceptionDialogFalseToggles display an error window when catching an unhandled exception.
SkipEnforceDBExistsStepFalseWhen set to true, this variable instructs the server to skip enforcing the existence of the database during certain steps. This can be useful in scenarios where the database structure is managed externally or dynamically.
SkipTypeCheckOnInitializationFalseToggles skipping JavaScript type check at runtime.
SplashScreenTextDecisions OS is Loading...Prompts for text to display when the Portal loads/reloads.
SplitInstancesToProcessesTrue
StudioBaseUrl<blank>Prompts for the URL to the Studio. This is often left blank.
UseLuceneFullTextSearchFalseIf set to true, enables the use of Lucene for full-text search capabilities. Lucene is a powerful search engine library, and activating this variable enhances the platform's ability to perform efficient full-text searches.
UsePrototypeInstanceTrueToggles using a template instance. Mainly used for multitenant environments.
UserIdCaseSensitiveFalseToggles case sensitivity for username during login.
UseTimeZoneTranslationFalseToggles time zone translation.
WaitForDebuggerFalse
WarnOnSystemValidationIssuesTrue
WatcherSocketPort20999Sets the port for the watcher socket. The watcher socket facilitates communication and coordination between different components of the Decisions system, and configuring the port allows for proper network communication.
For more information and questions regarding Settings.xml, see Decisions Forum: Settings.

Feature Changes

DescriptionVersionDateDeveloper Task
Settings.xml was updated with API exposing properties.
9.2August 19, 2024[DT-041834]
IgnoreAllCertificateErrors was removed.
9.3September 11, 2024[DT-041755]



Was this article helpful?