Canceling a Replay Session

You can cancel any Replay session that is in progress or that is scheduled to run.

Depending on the state of the replay session, you might need to do further clean-up of the appliance. Specifically, you might want to clear the log data in the destination LogLogic LX Appliance if the log data in the replay session was being parsed.

Note: If you cancel a Replay session that is in progress, the Replay session finishes the file it is currently processing before stopping.

Procedure

  1. From the navigation menu of the LogLogic ST Appliance, click Administration > Replay.

    The Replay Status tab appears listing all existing Replay sessions in your system.

    If no Replay session has been scheduled yet, the Replay Status tab displays No match found in database even though you may have added a Replay rule (or modified an existing one) and configured the Time Interval—you still must schedule the Replay rule to run in a Replay session.

  2. Select the appropriate Replay sessions, and then click Cancel.
  3. Confirm that you want to cancel the Replay session.

Result

The Replay Status tab appears with your Replay session showing a state of cancelled.