Modifying a Replay Rule

Procedure

  1. From the navigation menu of the destination LogLogic ST Appliance, click Administration > Replay.
  2. Click the Replay Rules tab.
    The Replay Rules tab appears listing all existing Replay rules in the appliance.
  3. Hover over the name of an existing Replay rule and left-click. The Modify Replay Rule tab appears.
  4. Enter the following information:
    Option Description
    Rule Name Name of the rule
    Device Type Select the device or application generating the logs to be transferred
    Source Device IP address of the device from which you want to transfer files
    Search Filter Select the Pre-Defined search filter to use to filter the archived log data
    Time Interval Time interval for the archived data you want to process
  5. Click Save to modify the Replay rule or Cancel to discard modifications.

What to do next

After you modify your Replay rule you can schedule a Replay session that uses your Replay rules.
Previous topic: Adding a Replay Rule