Table of Content¶

• Data Integration
  • Adding and Configuring
  • Editing and Managing
  • Deleting
  • Sharing
• Devices
  • Adding a Device
  • Adding Bulk Devices
  • Importing Devices Via a CSV File
  • Editing a Device
  • Deleting a Device
• Device Groups
  • Adding a Device Group
  • Editing a Device Group
  • Deleting Device Groups
• Built-in Collectors
  • Syslog Collector
  • Snare Collector
  • FTP Collector
  • SNMP Trap Collector
  • sFlow Collector
  • File System Collector
• Built-in Fetchers
  • WMI Fetcher
  • FTP Fetcher
  • SCP Fetcher
  • SNMP Fetcher
  • SDEE Fetcher
• Parsers
  • Adding a Parser
  • Editing a Parser
  • Deleting a Parser
  • Default parsers
    • Line Parser
    • Syslog Parser
    • Multi Line Syslog Parser
    • Email Parser
    • DB2 Parser
    • RACF Parser
    • CSVParser
    • JSONLineParser
• Repos
  • High-Availability Repos
  • Adding a Repo / HA Configuration
  • Exporting Repos
  • Importing Repos
  • Editing a Repo
  • Deleting Repos
• Routing Policies
  • Adding a Routing Policy
  • Editing a Routing Policy
  • Deleting Routing Policies
• Signatures
  • Important terminologies
    • Fields
    • Values
    • Definers
  • Writing signatures
    • Capturing word(s)
    • Capturing numbers
    • Capturing IPs
    • Capturing field-values separated by signs
    • Capturing field-values using Dynamic Definers
    • Capturing using regex pattern
    • Using OR on definers
• Normalization Packages
  • Adding a Normalization Package
  • Deactivating Signatures
  • Exporting Normalization Packages
  • Importing Normalization Packages
  • Editing a Normalization Package
  • Cloning Normalization Packages
  • Deleting Normalization Packages
• Normalization Policies
  • Compiled Normalizers
  • Adding a Normalization Policy
  • Editing a Normalization Policy
  • Deleting Normalization Policies
• Enrichment Sources
  • Adding IPtoHost as an Enrichment Source
  • Adding ODBC as an Enrichment Source
  • Editing an Enrichment Source
  • Deleting Enrichment Source
  • Viewing Enrichment Data
• Enrichment Policies
  • Adding an Enrichment Policy
  • Editing an Enrichment Policy
  • Deleting an Enrichment Policy
• Processing Policies
  • Adding a Processing Policy
  • Editing a Processing Policy
  • Deleting a Processing Policy
• Log Collection Policies
  • Adding a Log Collection Policy
  • Editing a Log Collection Policy
  • Deleting Log Collection Policies
• Label Packages
  • Adding a Label Package
  • Applying Labels from the Search Interface
  • Applying Labels using Normalization Signatures
  • Applying Labels with Labeling Rules
  • Exporting Label Packages
  • Importing Label Packages
  • Editing a Label Package
  • Activating Label Packages
  • De-activating Label Packages
  • Cloning Label Packages
  • Deleting Label Packages
• Fields
  • Adding a Field
  • Ordering Fields
    • Using Re-order Position Button
    • Using Advanced Fields Orderer
  • Exporting Fields
  • Importing Fields
  • Editing a Field
  • Deleting Fields
• List and Tables
  • Lists
    • Static List
      • Adding a Static List
      • Editing a Static List
    • Dynamic List
      • Adding a Dynamic List
      • Defining the list values with the process command
    • Exporting a List
    • Importing a List
    • Deleting a List
  • Tables
    • Dynamic Table
      • Adding a Dynamic Table
      • Defining the table fields with the process command

Appendix

• List of Fields
• List of Definers
• List of Timezones