Skip to main content

Data LakeData Lake Migration Guide

Table of Contents

Migration Process

The migration procedures in this guide will help you manually translate different types of Data Lake content to the cloud-native application of the Exabeam Security Operations Platform.

Procedure Overview

The procedure for migrating Data Lake content varies depending on the type of content you're migrating. However, each procedure includes the following general steps:

  1. Open both Data Lake and the corresponding Exabeam Security Operations Platform application for the type of content you are migrating: Search, Correlation Rules, Dashboards, or Context Collectors.

  2. Depending on the object you are migrating, copy, rebuild, or import the content from Data Lake to the Exabeam Security Operations Platform application.

  3. In the Exabeam Security Operations Platform application, adjust any query syntax and entity mapping to conform to the common information model standards.

  4. Test the content in the Exabeam Security Operations Platform application to verify that it produces satisfactory results.

Content-specific Procedures

Follow the links below to find specific procedures for each type of content.

Note

The order of steps listed below is a logical recommended order. However, you can vary the order based on your own business needs and priorities.

  1. Migrate Custom Context Tables – Export custom context tables from Data Lake as CSV files and import them into Context Collectors. If any of your searches, correlation rules, or dashboards rely on data in context tables, it's a good idea to complete this step before migrating other Data Lake content.

  2. Migrate Saved Searches – Migrate saved search queries from Data Lake to Search. In Data Lake, search queries serve as the core for other types of content, including correlation rules, dashboards, visualizations, and reports. Migrating the saved searches early in the process can catch issues that might otherwise turn up later.

  3. Migrate Correlation Rules – Migrate correlation rules from Data Lake to Correlation Rules.

  4. Migrate Dashboards and Visualization – In Dashboards, rebuild your dashboards, visualization, and reports to match the content in Data Lake.