Edit Ingest Feed Configuration
Security Requirements and Controls
Change ingest feeds
permission
You can edit an existing ingest feed in order to change the configuration, for example to change details related to the AWS SQS queue.
Go to
page and select the repository where you created the feed.- , under on the side menu click
On the
Ingest feeds
page, search for the feed you want to edit using the search box, then click the ⋮ icon next to the relevant feed and select .Figure 120. Ingest Feeds - Edit
You can now edit the configuration as required, where:
Name
Enter a name for the feed.
Description
Enter a meaningful description for the feed.
Compression
Select a compression type from the list. Auto (default) uses decompression based on MIME type and file extension.
Preprocessing
Define how the data is processed prior to ingestion, it can be split by AWS records, which is used, for example, by CloudTrail or split by new line, which is used by VPC Data flow logs for example, the way data should be preprocessed depends on the log source.
Parser
Select the parser to apply to ingest data. The parser can be any parser that is on repository, predefined, from a package, or custom. See Parsing Data for more information.
Click AWS Steps Phase 2 for details on the values used in this section.
to confirm any changes and make changes to the AWS configurations. SeeClick
to verify the configuration, and then click to save the changes. Click if you want to discard the changes.