To create meta keys that will appear in the Investigation view, you would most commonly edit configuration files on the
Packet Decoder
Concentrator
Broker
Log Decoder
Submit