This topic provides instructions for editing a custom feed using the Custom Feed Wizard.
Completing this procure will result in:
- An existing custom feed opened.
- The feed (.zip format) or the file used to create the feed (.csv or .xml) downloaded and edited.
- The feed recreated with the updated file and new feed specifications.
To edit an existing feed:
In the Security Analytics menu, select Live > Feeds.
The Feeds view is displayed.
The Configure Custom Feed or Configure Identity Feed panel opens in the Custom Feed wizard.
If you want to edit the feed file:
Click download file.
For an Identity feed, the .zip file is downloaded. For a custom feed, the .csv or .xml file is downloaded to your local file system.
Note: For a STIX feed, the .xml file is downloaded to your local file system.
- Edit and save the file.
- In the Define Feed tab, browse for and open the edited file.
- Edit any other parameters in the Define Feed tab, Select Services tab, and Define Columns tab that apply to the type of feed.
Anytime before you click Finish, you can:
- Click Cancel to close the wizard without saving your changes.
- Click Reset to clear the data in the wizard.
- Click Next to display the next form (if not viewing the last form).
- Click Prev to display the previous form (if not viewing the first form).
- In the Review tab, review the feed information, and if correct, click Finish.
The feed is added to the feeds list and progress bar tracks completion. Upon successful creation of the feed definition file, the Create Feed wizard closes, and the feed and corresponding token file is listed in the Feed grid. You can expand or collapse the entry to see how many services are included, and which services are successful.