Hi! How to reload particular envision log parser after xml file was modified at filesystem of logdecoder?
Hi! How to reload particular envision log parser after xml file was modified at filesystem of logdecoder?
Hi Nikolay,
This method will reload all the parsers:
Via Decoder/LogDecoder Command Line
curl http://admin:Password@IP:50104/decoder/parsers?msg=reload;
Via browser
http://admin:Password@IP:50104/decoder/parsers?msg=reload
You can either do one of the following:
1. In View --> Config, enable and disable a parser. This will force the reload of all parsers.
2. In View --> Explore, navigate down to ‘decoder’ then ‘parsers’. Right-click on ‘parsers’ and click ‘properties’. In the bottom right window, select ‘reload’ then click ‘Send’.
Naushad A Kasu | Senior Practice Consultant, Professional Services | RSA | m: 612.772.5843 | e: naushad.kasu@rsa.com<mailto:naushad.kasu@rsa.com> | www.rsa.com<http://www.rsa.com/>
UPCOMING OUT OF OFFICE
PTO: October 3-6
Hi Nikolay,
Please use 000017847 - How to reload parsers on a Decoder or Log Decoder via the RSA Security Analytics UI
For more details on Parser uploading refer:https://community.rsa.com/thread/192023?commentID=893509#comment-893509