siem
Use this command to check the SIEM database.
siem config
Use this command to configure clickhouse.
Syntax
diagnose siem config add <svr | usr> <config_name> <config_value>
diagnose siem config del <svr | usr> <config_name>
diagnose siem config show
|
Variable |
Description |
|---|---|
|
add <svr | usr> <config_name> <config_value> |
Set the clickhouse configuration. Select server or user config, and then enter the config name and config value. |
|
del <svr | usr> <config_name> |
Delete the clickhouse configuration. Select server or user config, and then enter the config name to delete. |
|
show |
Show the clickhouse configuration. |
siem merges
Use this command to list the background merge tasks.
Syntax
diagnose siem merges list
|
Variable |
Description |
|---|---|
|
list |
List the background merge tasks. |
siem mutations
Use this command to list the background mutation tasks.
Syntax
diagnose siem mutations list
|
Variable |
Description |
|---|---|
|
list |
List the background mutation tasks. |
siem parts
Use this command to list the SIEM parts.
Syntax
diagnose siem parts list <table> <level>
|
Variable |
Description |
|---|---|
|
list <table> <level> |
List the SIEM parts. Enter the table name and part level. |
siem process
Use this command to list or kill query processes.
Syntax
diagnose siem process list full
diagnose siem process kill <query_id>
|
Variable |
Description |
|---|---|
|
list full |
List the query processes and its details. |
|
kill <query_id> |
Kill a running query. Enter the query ID. |