KUMA allows sending test events to the system. Use the option of sending test events to KUMA to test rules, reports, dashboards, and also to check the resource consumption of the collector with different event streams. Events can only be sent to a collector that receives events over TCP.
To send test events, you need:
In the following instructions, the file with raw events is named send_test_events.txt as an example. You can use your own file name.
In the following instructions, the configuration file is named config_for_test_events as an example. You can use your own file name.
To send test events:
The <name of file with exported events
>.tsv file is displayed in the Downloads section.
If you are not collecting raw events, enable collection for a short time by setting the Keep raw event setting of the normalizer to Always. After the collection is completed, restore the previous value of the Keep raw event setting.
name of file with exported events
>.tsv to send_test_events.txt.{
"kind": "tcp",
"name": "-",
"connection": {
"name": "-",
"kind": "tcp",
"urls": ["<
IP address of the KUMA collector for receiving events over TCP
>:<
port of the KUMA collector for receiving event over TCP
>"]
}
}
Save the config_for_test_events configuration file.
/opt/kaspersky/kuma/kuma tools load --raw --events /home/events/send_test_events.txt --cfg home/events/config_for_test_events --limit 1500 --replay 100000
Available settings
Setting |
Description |
---|---|
|
Full path to the file containing "raw" events. Required setting. If the full path is not specified, the command does not run. |
|
Path to the configuration file. Required setting. If the full path is not specified, the command does not run. |
|
Stream to be sent to the collector, in events per second (EPS). Required setting. If no value is specified, the command does not run. |
|
Number of events to send. Required setting. If no value is specified, the command does not run. |
As a result of running the command, test events are successfully sent to the KUMA collector. You can verify the arrival of test events by searching for related events in the KUMA web interface.
Page top