Spotfire® Server and Environment Security

Spotfire Enterprise Runtime for R - Server Edition

Spotfire® Enterprise Runtime for R (a/k/a TERR™) provides Spotfire clients with the ability to execute R code, using Spotfire Enterprise Runtime for R, on the TERR service node.

A Spotfire Enterprise Runtime for R - Server Edition service (a/k/a, a TERR™ service) is required to execute data functions in Spotfire files from Spotfire Automation Services and Spotfire Web Player, because those services do not have TERR engines.

The TERR service itself is running the service as the same user account as is running the node manager on which the service runs. See Node Manager.

By default, scripts executed by the TERR service on behalf of its users are executed in a different execution context, as explained here.

TERR service component Default Description
Service account NT Authority\System or spotfire (Linux) Default: NT Authority\System or spotfire (Linux)
Log files <node manager installation>/logs

See the topic Service Logs in the Spotfire® Enterprise Runtime for R - Server Edition Installation and Administration guide for more information.

Table 1. The Spotfire Enterprise Runtime for R – Server Edition ports and protocols
Name Default Port and Protocol Function Description Secure/Encrypted
Communication port Next available general purpose 950<x>/tcp. (For example, 9502/tcp, or 9503/tcp, and so on, depending on the other data function services installed.) For secure (HTTPS) internal communication. Cannot be accessed directly. Yes
TERR engine ports 61001/tcp -> 62000/tcp Host-internal communication between the TERR service and the TERR engines. No