Deleting a metadata streaming receiver using the CLI

Prev Next

Use the CLI commands in this topic to delete an HTTP or Rsyslog receiver used for metadata streaming.

To delete a metadata receiver:
  1. Go to CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. View the metadata streaming configuration to see the receiver that you want to delete.

    hostname (config) # show datastreaming configuration
    
    data-streaming configuration:
       Feature enabled                  :    yes
       HTTP enabled                     :    yes
       Rsyslog enabled                  :    yes
    
       Helix Configuration:
       Helix enabled                    :    no
       Helix FQDN                       :
       Helix bootstrap certificate      :
    
       Subscribed http consumers        :    1
    
       Subscriber 01 of type: http:
       name                     =    HTTP_Receiver_Milpitas
       enable                   =    yes
       server-url               =    
    https://milpitas.fireeye.com:8443/receiver.jsp
       content-type             =    text/plain
       collector-type           =    ********
       Authorization:
       auth enable              =    yes
       method                   =    BASIC
       token                    =    
       username                 =    admin
       auth password            =    xxxxxxxx
       SSL:
       verify                   =    yes
       min version              =    TLSv1.2
       ssl supplemental CA list =    none
       TLS                      =    yes  
    
       Subscribed rsyslog consumers     :    1
     
       Subscriber 01 of type: rsyslog:
       Name                     =    rsyslog_receiver
       enable                   =    yes
       protocol                 =    tcp
       port                     =    514
       fqdn                     =    ex_example.com
       format                   =    bsd
       ssl-verify               =    no
       ssl min version          =    TLSv1.2
       ssl supplemental CA list =    none
        
  3. Specify the receiver name to delete.

    hostname (config) # no datastreaming configuraton protocol {http | rsyslog} consumers <service-name>
  4. Verify that the receiver was deleted.

    hostname (config) # show datastreaming configuration
  5. Save your changes to the current active configuration.

    hostname (config) # write memory