Skip to main content

Security ContentExabeam Security Content in the Legacy Structure

Test a Parser on Advanced Analytics

To test a parser in Advanced Analytics, run the following command on the Advanced Analytics deployment:

(.env)$ exa-fetch-parse --config-file /opt/exabeam/config/custom/custom_lime_config.conf --request 
"(2019-06-03,2019-06-05,syslog)" --status ParseOnly

The command runs the ingestion engine over the supplied log fetch type, in this case the logs that were sent by syslog, and parses only the specified dates. The directory on which the command runs the ingestion engine is specified in the configuration file by the --config-file parameter. This is typically the log storage directory. The output will be in the same directory.