Configuring PX metadata using CLI

Log in to the NDR as npadmin using the NDR IP address or FQDN. For example:
$ ssh npadmin@10.1.0.1
or
$ ssh npadmin@exampleFQDN
Enter privileged mode:
npadmin@ia> enable
Enter the npadmin password. The password can be 5 to 24 characters long.
[sudo] password for npadmin: <password>
Enter configuration mode:
npadmin@ia# configure system
The prompt changes to npadmin@hostname(config)# on the terminal indicating that configuration mode is enabled. You can now proceed with the configurating metadata.
Enter the metadata configuration and then press Enter.
npadmin@ia# metadata
To enable import of metadata from PX, type T in the Enter your choice field and press Enter.
Type A, press Enter to add a PX appliance.
1. Type the IP address of PX and then press Enter.
2. The appliance displays the key fingerprint and asks you if you want to continue using key. Press Y.
3. Enter the username used in PX and then press Enter.
4. Enter the password used to connect to PX, Press Enter.
5. Keep the default option unchanged in the Customize source directory on PX[data], press Enter.
6. The following metadata engines are displayed one after the other. The engines are disabled by default and shows Y/N to reflect the disabled status. Type Y for each engine to enable them. You can choose to enable any detection engine as per your investigation requirement.
  - Enable beaconing engine (disabled) : Y/N - Press Y to enable beaconing engine.
  - Enable data-exfill engine (disabled) : Y/N - Press Y to enable data exfiltration engine.
Type S to save the configuration. The PX appliance is added to NDR and is displayed in the Connected PXes row.