Editing context table settings

To edit context table settings:

1. In the KUMA web interface, select the Resources section.
2. In the Resources section, click Context tables.
3. In the list in the Context tables window, select the context table whose settings you want to edit.
4. Specify the values of the following parameters:
   • Name—unique name of the resource.
   • TTL—the record added to the context table is stored in it for this duration. This value is specified in seconds.
   • Description—any additional information about the resource.
   • Schema is an ordered list of fields and their data types, with key fields marked. If the context table is not used in a correlation rule, you can edit the list of fields.

     If you want to edit the schema in a context table that is already being used in a correlation rule, follow the steps below.

   The Tenant field is not available for editing.

5. Click Save.

To edit the settings of the context table previously used by the correlator:

1. Export data from the table.
2. Copy and save the path to the file with the data of the table on the disk of the correlator. This path is specified in the Directory column in the Correlator context tables window. You will need this path later to delete the file from the disk of the correlator.
3. Delete the context table from the correlator.
4. Edit context table settings as necessary.
5. Delete the file with data of the table on the disk of the correlator at the path from step 2.
6. Add the context table in which you edited the settings to the correlator.
7. To restart the correlator, in the Resources → Active services section, in the list of services, select the check box next to the relevant correlator, click the three-dots icon on the toolbar and in the displayed menu, select Restart.
8. Adapt the fields in the exported table (see step 1) so that they match the fields of the table that you uploaded to the correlator at step 6.
9. Import the adapted data to the context table.