Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Exporting Contents from the DSM Editor

You can use a content management tool script to export custom content that is created in the DSM Editor. Contents can be exported from one JSA deployment and imported into another JSA deployment. You can also export custom content to external media.

The DSM Editor produces the following content types:

Table 1: DSM Editor Content Types

Custom content type

String

ID

Custom properties

customproperty

6

Log source type

sensordevicetype

24

Log source extensions

deviceextension

16

Custom QidMap entries

qidmap

27

The contentManagement.pl script is in the /opt/qradar/bin directory

Exporting Contents As a Package

You can use the content management tool script to search for specific content that is created in the DSM Editor. These contents are exported as a package.

  1. Use SSH to log in to JSA as the root user.

  2. To search for specific content items to export, type the following command:

    ./contentManagement.pl -a search -c [content_type] -r [regex]

    For example, to search for the content items of a log source type, type the following command:

    /opt/qradar/bin/contentManagement.pl -a search -c 24 -r "<search_name>"

  3. Create a text file that lists the content that you want to export.

    Each line must include the custom content type followed by a comma-separated list of unique IDs for that type.

    For example, to export three log source types with ID 24, ID 26, and ID 95, all custom properties, create a text file with the following entries:

    sensordevicetype, 24,26,95

  4. Export the content items as a package by using the following command:

    /opt/qradar/bin/contentManagement.pl -a export -c package -f <source_file>

Exporting Content for Single Custom Property

You can use the content management tool script to export content for each custom property that is created from the Properties tab in the DSM Editor.

When you use the DSM Editor to create custom properties, a customproperty entity is produced for each custom property that is created.

  1. Use SSH to log in to JSA as the root user.

  2. To search for specific content to export, type the following command:

    ./contentManagement.pl -a search -c [content_type] -r [regex]

    For example, to search for the content of a custom property, type the following command:

    /opt/qradar/bin/contentManagement.pl -a search -c 6 -r "<name_of_custom_property>"

  3. To export a custom property content, type the following command:

    /opt/qradar/bin/contentManagement.pl -a export -c [content_type] -i [content_identifier]

Related Documentation