Kaspersky Unified Monitoring and Analysis Platform

File type

The file type is used for writing data to a file.

Available settings:

Basic settings tab:

  • Name (required)—a unique name for this type of resource. Must contain from 1 to 128 Unicode characters.
  • Tenant (required)—name of the tenant that owns the resource.
  • Disabled toggle switch—used if you do not need to send events to a destination. By default, sending events is enabled.
  • Type (required) – destination type, file.
  • URL (required)—path to the file in which the events must be written.

    Limitations when using prefixes in file paths

  • Description—up to 256 Unicode characters describing the resource.

Advanced settings tab:

  • Buffer size is used to set the size of the buffer. The default value is 16 KB, and the maximum value is 64 KB.
  • Timeout field is used to set the timeout (in seconds) for another service or component response. The default value is 30.
  • Disk buffer size limit field is used to specify the size of the disk buffer in bytes. The default size is 10 GB.
  • Delimiter is used to specify the character delimiting the events. By default, \n is used.
  • Buffer flush interval—this field is used to set the time interval (in seconds) at which the data is sent to the destination. The default value is 100.
  • Workers—this field is used to set the number of services processing the queue. By default, this value is equal to the number of vCPUs of the KUMA Core server.
  • Debug—a drop-down list where you can specify whether resource logging should be enabled. By default it is Disabled.
  • The Disk buffer disabled drop-down list is used to enable or disable the use of a disk buffer. By default, the disk buffer is disabled.
  • In the Filter section, you can specify the conditions to define events that will be processed by this resource. You can select an existing filter resource from the drop-down list, or select Create new to create a new filter.

    Creating a filter in resources