- Advanced Analytics
- Understand the Basics of Advanced Analytics
- Configure Log Management
- Set Up Admin Operations
- Set Up Authentication and Access Control
- Additional Configurations
- Configure Rules
- Exabeam Threat Intelligence Service
- Threat Intelligence Service Prerequisites
- View Threat Intelligence Feeds
- Threat Intelligence Context Tables
- View Threat Intelligence Context Tables
- Assign a Threat Intelligence Feed to a New Context Table
- Create a New Context Table from a Threat Intelligence Feed
- Check ExaCloud Connector Service Health Status
- Exabeam Cloud Telemetry Service
- Manage Security Content in Advanced Analytics
- Health Status Page
Exabeam Engines
To start any Exabeam engines, navigate to the Exabeam Engine page in Advanced Analytics:
From the left sidebar, click SETTINGS
, then select Analytics.Under Admin Operations, select Exabeam Engine.
Procedures for starting Exabeam engines vary depending on the Advanced Analytics version you are using. Click the appropriate links below for more information.
In this Advanced Analytics version, you can use the UIP reprocessing option or restart the analytics engine:
Exabeam Unified Log Ingestion Engine – Click UIP Log Reprocessing to open the cloud-based Log Stream functionality. Log Stream provides visibility into the unified ingestion pipeline with the following tabs:
Re-parsing Jobs – You can opt to re-parse logs by scheduling a re-parsing job.
Live Tail – View samples of incoming data in real time to ensure proper processing.
Exabeam Analytics Engine – Restart the analytics engine so that it can process log feeds.
In the Exabeam Analytics Engine panel, click Restart Processing and select a restart option from the following settings:
Restart the engine – The engine continues processing from where it left off.
Restart from the initial training period – The engine continues processing from the initial training period.
Restart from a date – The engine chooses the nearest snapshot available for the specified date and reprocesses from this date.
Click Process to start the engine. The system validates any changes and checks for errors. If errors are identified, they are listed and the engine does not start processing. If no errors are identified, the engine starts.
In this Advanced Analytics version, you can restart the LIME engine or the analytics engine:
Exabeam Log Ingestion Engine – Restart the LIME engine so that it ingests logs from log feeds that are defined in the Advanced Analytics Log Feeds settings.
Click Ingest Log Feeds, and select specific log feeds for restart.
Select a restart option from the following settings:
Restart the engine – The engine continues processing from where it left off.
Restart from the initial training period – The engine continues processing from the initial training period.
Restart from a date – The engine continues processing from a specified date.
Click Ingest feeds to start the engine.
Exabeam Analytics Engine – Restart the analytics engine so that it can process log feeds.
Click Restart Processing and select a restart option from the following settings:
Restart the engine – The engine continues processing from where it left off.
Restart from the initial training period – The engine reprocesses all configured log feeds from the initial training period.
Restart from a date – The engine chooses the nearest snapshot available for the specified date and reprocesses from this date.
Click Process to start the engine. The system validates any changes and checks for errors. If errors are identified, they are listed and the engine does not start processing. If no errors are identified, the engine starts.