Exporting and Importing Aliases

In the Configuration ManagerIn the Configuration Manager, you can create and configure TLC Resources (Monitored Assets, AssetA Log Source in your TLC environment. See Monitored Assets and Discovered Assets. Groups, Managers, Locations, Event1. Either a log message that a Manager has standardized (i.e. normalized) for use by TLC (a.k.a. Normalized Messages), or an event or vulnerability imported from a scanner. 2. An 'event message' collected from a Log Source.-Management Databases), normalization objects (NormalizationThe process of standardizing log messages for use by TLC. Standardized messages are known as Normalized Messages. Rules, Aliases, and Normalized-Message Filters), and correlation objects (CorrelationThe examination of Normalized Messages for events of interest, along with the ability to initiate appropriate responses; for example, sending an email notification to specified recipients. Engines, Rules, Lists, and Actions)., you can export Normalization Aliases to an XML file. With the TLC Console1. Tripwire LogCenter Console is the software for the TLC graphic user interface (GUI), or 2. The Tripwire LogCenter GUI. Through the TLC Console, you can configure TLC, oversee your TLC environment, and manage log and event data. Import feature, you can import the Aliases in one of these files.

Note	To update your Configuration Manager with the latest Tripwire-defined Normalization Aliases, or to review the order in which Tripwire recommends TLC objects be imported, see Updating TLC with the Latest Tripwire Content.

To export Normalization Aliases to an XML file:

1.

In the side bar, select Resources >Configuration Manager.

2.

In the side bar of the Configuration Manager, select Normalization >Aliases.

3.

In the workspace, select the Aliases to be exported and click Export.

4.

In the Export Rule AliasA custom variable that represents a partial or complete regular expression. dialog, enter a name for the file and click Save.

Notes	By default, TLC saves the exported file in the Content sub-directory of your TLC Console installation directory. To select multiple Aliases, select the Aliases while pressing the CTRL or SHIFT key.

To import Aliases from one or more XML files to TLC:

1.

From the menu bar in the TLC Console, select Options >Import TLC Content > Content.

2.

Select Use a custom file and click Browse.

3.

In the Open TLC Content File dialog:

a.

From the Files of type drop-down, select XML File.

b.

Select the .xml file(s) and click Open.

4.

In the Select and Import Content field, expand the Normalization Aliases group and select the Import check box for each Alias to be imported.

5.

ClickImport.

The Import Status field presents the results of the import process.