To change the SIEM IP address use the following to change the IP address in the records stuck in the SySLOGQ table , and update the FILTERS file for future records.
TACL> VOLUME $<VOLUME>.<XYGATEMA Installation Subvolume>
TACL> RUN XMA INSTALL
TACL> XMA_PWSTOP (Stop the XYGATEMA Pathway Environment)
TACL> VOLUME $<VOL>.XMADAT (VOLUME to the XYGATEMA SQL/MP database subvolume)
TACL> SQLCI
>>UPDATE SYSLOGQ SET TARGET_HOST = "<New IP Address>" WHERE TARGET_HOST = "<Old IP Address>";
?Example:
?>>UPDATE SYSLOGQ SET TARGET_HOST = "192.168.0.100" WHERE TARGET_HOST = "127.1.1.0";
>>EXIT;
TACL> XMA_EDIT_FILTERS
(Updating the FILTERS file requires that every instance of the IP address be changed from the old one to the new one)
Using EDIT: *C(hange) /<Old IP Address>/<New IP Address>/a(ll)
Verify change by typing LB (list both upper and lower case)/ IPALERT_ADDRESS/
??Example:
*c/127.1.1.0/192.168.0.100/a
*lb/IPALERT_ADDRESS/
315 IPALERT_ADDRESS 192.168.0.100
398 IPALERT_ADDRESS 192.168.0.100
*EXIT (from EDIT)
TACL> XMA_PWCOOL (Restart the XYGATEMA Pathway Environment)
If this article did not provide a solution, please open a case with our support team by sending an email message to
support@xypro.com.