Services & System Settings
Where the operational surfaces are
Four of them sit in the header, not inside Settings, because they are things you look at rather than things you change:
| Header entry | Shows |
|---|---|
| Status | Connection monitor, gateway and host information, CPU, memory, every disk QUBIQ writes to, pipeline statistics, and who is connected. |
| Logs | System logs and pipeline execution results, in two tabs. |
| Connections · Namespace | The connection list and the tag tree. |
Settings is where configuration lives, in fourteen categories:
| Category | Holds |
|---|---|
| System Health | Log retention, connection-monitoring mode, namespace optimisation |
| System Services | Start, stop and restart each service |
| Execution | Pipeline execution configuration |
| Storage Folders | Where QUBIQ keeps its data on disk |
| AI Assistant | Model, throughput, service identity, external access, embeddings, knowledge base |
| Map | Tile server and WMS sources |
| Alarms | Alarm storage |
| Audit Log | Audit storage, and the journal itself |
| Historian | Historian storage and concurrency |
| Store & Forward | Buffer status and quarantine |
| Security Policy | Sign-in settings, server certificate, external-content policy, security hardening, the permission editor |
| Identity & Access | Users, roles and on-call rosters |
| Script Sandbox | Sandbox level and installed Python packages |
| Backup & Restore | Take and restore backups |
Licensing is not in Settings: it has its own page at /licensing, reached from the licence status in the status bar. → Licensing & modules
Service control
Settings → System Services lists every service with its state and heartbeat.
| Action | Permission |
|---|---|
| View the service list | Access settings |
| Start, stop or restart a service | Manage services |
Stopping through the interface tells the supervisor not to restart the service, so it stays down. That is the safe way to take a protocol worker out of service for maintenance — killing the process merely triggers an automatic restart.
For what each service does and what a restart affects, see The gateway.
Restarting a service belonging to a lapsed module asks you to confirm, naming that module. On a healthy installation the confirmation never appears — which is what stops it being trained away by the time it matters. → Licensing
Health and status
| Where | Shows | Permission |
|---|---|---|
| Status (header) | Host CPU, memory, every volume QUBIQ writes to, and gateway information | View the status panel |
| Status (header) | Per-connection state and health | View the status panel |
| Status (header) | Pipeline statistics | super admin |
| Status (header) | Connected users — who, from where, on what, and since when | View the status panel |
Settings → System Services | Per-service state and heartbeat | Access settings |
| The startup screen | What happened during boot | shown automatically |
The gateway also answers an unauthenticated liveness check suitable for a load balancer or container probe — ask your QUBIQ contact for the path if you need to wire one up.
Read the startup screen first after a failed or partial start. QUBIQ holds the interface behind it until every service reports in, and it records what the supervisor did and where it stopped — which is nearly always the answer.
The Connected column on the connected-users list carries a date as well as a time
New in 1.0.4. A LiveView screen on a wall stays up for days, and a bare 14:03 on such a row
reads as a few minutes ago when it was Tuesday. The full instant is in the cell's tooltip.
System settings
| Setting group | Permission |
|---|---|
| Log retention and system configuration | Configure system logging |
| Connection-monitoring mode | Manage services |
| Storage folders | Manage services |
| Script sandbox | Manage the script sandbox |
| Sign-in settings and security hardening | Manage sign-in settings |
| External-content policy | Access settings / Manage sign-in settings |
| Map tile / WMS sources | Access settings / Manage services |
| Historian storage and designation | View connections / Edit connections |
| Alarm storage | Manage alarms |
| Audit storage | Manage the audit journal |
| Users, roles and rosters | Manage users |
| Backup and restore | Manage backups |
External-content policy
Controls whether views may load content from outside the gateway — external images, embedded pages, remote map tiles. On an isolated plant network the answer should be no, and this is where you say so.
Map tiles
The OpenStreetMap widget can be pointed at a self-hosted tile server or a WMS endpoint, which is what makes geographic screens workable on a network with no internet access.
Storage
| What | Where |
|---|---|
| Configuration database | In the data directory, encrypted at rest |
| Project resources | projects/ |
| User SQLite databases | user-databases/ (sandboxed) |
| Python packages | python-packages/ |
| SNMP MIBs | mibs/ |
| Diagnostic reports | log/ |
| Tag history | External QuestDB |
| Audit journal | External SQL database |
Choosing where they live New in 1.0.1
Settings → Storage Folders lets you browse for each location rather than typing a path blind.
The picker runs on the server, so it shows the gateway machine's filesystem — which is the one that
matters — and suggests the conventional location for the operating system it is running on.
Monitor free space on every volume QUBIQ writes to. The Status panel lists them all New in 1.0.1 rather than only the one the process happened to start from, which is the distinction that matters once history or project assets live on a separate disk.
The configuration database stays small; project assets and uploads are what grow.
Time
Every timestamp an operator sees — chart axes, alarm journal entries, audit records — comes from the gateway's clock, not the browser's. Browsers align to it before they even have a session, so charts from two different panels agree.
Keep the host clock synchronised (NTP). Historian timestamps, alarm journal entries and audit records all come from the server. A drifting clock corrupts all three, and the damage is not retroactively fixable.
Diagnostics and reporting
| Where | What | Permission |
|---|---|---|
| Logs (header) → System | Read system logs | View system logs |
| Logs (header) → System | Clear system logs | Clear system logs |
| Logs (header) → Executions | Pipeline runs and per-node results | View execution logs |
| The report dialog | Submit a structured diagnostic report | authenticated |
| Status (header) | Pipeline statistics | super admin |
Diagnostic reports are written as rotated NDJSON under log/ in the data directory.
Routine operations
Daily — glance at connection health, active alarms, and free disk.
Weekly — review alarm bad actors, check store-and-forward buffers and quarantine, look at execution-log error rates.
Monthly — review users and permissions, verify the audit chain, confirm backups restore, review historian growth against retention.
Before every upgrade — take a backup, note the current version, read What's New.