- Advanced Analytics
- Understand the Basics of Advanced Analytics
- Configure Log Management
- Set Up Admin Operations
- Set Up Authentication and Access Control
- Additional Configurations
- Configure Rules
- Exabeam Threat Intelligence Service
- Threat Intelligence Service Prerequisites
- View Threat Intelligence Feeds
- Threat Intelligence Context Tables
- View Threat Intelligence Context Tables
- Assign a Threat Intelligence Feed to a New Context Table
- Create a New Context Table from a Threat Intelligence Feed
- Check ExaCloud Connector Service Health Status
- Exabeam Cloud Telemetry Service
- Manage Security Content in Advanced Analytics
- Health Status Page
Manually Install a Content Package
Install a new content package directly from Advanced Analytics settings onto your system.
Select a content package to install from a list of the latest, available content packages. If your environment can't access the internet, you can't install content packages from the cloud. Instead, download the content package from the Exabeam Community or your case ticket, then manually upload it.
A content package from a general Exabeam release is called a default package. It's important that you update your content with each release because the release may contain new parsers and event builders, support new log sources and vendors, or include other additions and fixes that keep your system running smoothly. You can upload multiple default content packages, but only install one default package at a time.
A content package that includes custom fixes you requested is called a custom package. You can upload and install any number of custom packages.
You can only install custom content packages that contain event builders or parsers.
In the sidebar, click SETTINGS
, then select Core.Under ADMIN OPERATIONS, select Content Updates.
To install a default content package, click the DEFAULT PACKAGES tab. To install a custom content package, click the CUSTOM PACKAGES tab.
Click INSTALL.
If the package is a default content package and a newer version of one you previously installed, this newer version replaces the older version. You can no longer view or install the older version.
If the package is a custom content package and a newer version of one you already installed, ensure that you uninstall the older version.