Managing Data Feeds

Filtering Feeds

You can filter the feeds that are ingested from the different sources such as Azure Blob Storage, GCP, and AWS using filter button.

To filter the feeds,

1. From the Log & Data Ingestion page, click at the top right corner
2. In Source Type, select any option from the dropdown list
   • Google Cloud Storage
   • AWS S3
   • Azure Blob Storage
3. Click Apply
   Feeds have been filtered according to your selection

Editing Feeds

After you have ingested a feed into the Chronicle instance, you can always edit or modify the log storage path.

To edit an existing feed,

1. From the Log & Data Ingestion page, click three dots next to any feed
2. Select Edit from the dropdown
   A window appears
3. Enter a new Log Storage Path
4. Click Update

Deleting Feeds

Resolution Intelligence provides you an ability to delete your existing feed from the log & feed ingestion page.

To delete your feed,

1. From the Log & Data Ingestion page, click three dots next to any feed
2. Select Delete from the dropdown