Tool Templates

Tool template in Application Metadata Intelligence predefines a list of applications, its attributes, and the format in which it needs to be exported to the tools. A template once created can be used by multiple exporters to export the attributes in a specified format to the destination tools.

You can use the tool templates while creating an Application Metadata Intelligence session. By default, you can find the following tool templates:

o   BroMetadata Template
o   Netflow V5 Template
o   SplunkMetadata Template.

Note:  You cannot edit the above templates.

You can create tool templates according to your requirements. You can also edit and clone the templates. Refer to Create Custom Tool Template for more information.

To create a customized Tool Template, do the following:

1.   On the left navigation pane, click , and then select Physical > Nodes
2. Click the Cluster ID of the device.
3. From the left navigation pane, click App Intelligence > Tool Templates.

You can view two system defined templates by default.

4. Click Create. The New Template page appears.
5. Enter the Template Name.
6. Click the App Editor button. The App Editor page appears.
a. Click the Application Family field and select an Application Family such as antivirus, webmail that needs to be filtered from the traffic. You can also select multiple application families.

If you choose to add or delete all the applications in a family, click Add All Application in Families or Delete All Application in Families.

Note:  You can select the required applications without selecting the application family.

b. Click the Application field and select an application or multiple applications that needs to be exported from the traffic.
c. Click Add to add the Application details.
7. Select the format (CEF/Netflow) in which the application details need to be exported to the tool.
8. Select the record or template type:
o   Segregated - The application-specific attributes and the generic attributes will be exported as individual records to the tool.
o   Cohesive- The application-specific attributes and the generic attributes will be combined as a single record and exported to the tool.
9. Enter the Active timeout and Inactive timeout in seconds.

Note:  Select the Version and the Template Refresh Interval for the Netflow format.

10. In the AdvancedSettings > Collects section, you can view and configure the following collect types:
•   Counter - Select the Bytes and Packets.
•   IPv4 - Select and enter the required information in the fields such as Source Address, Destination Address, Fragmentation, and Header Size and Payload Size.
•   IPv6 - Select and enter the required information in the fields such as Source Address, Destination Address, Fragmentation, and Header Size and Payload Size.
•   Transport -Select and enter the required information in the fields such as Source Address, Destination Address, and Header Size and Payload Size.

By default, the above collect types are displayed. Click to add the following collect types:

•   Data Link - Select any one of the parameters such as Source Mac, Destination Mac and VLAN.
•   Timestamp - Select the required timestamp such as System Uptime First, Flow Start, System Uptime Last, and Flow End.
•   Flow - Select the parameter as End Reason if required.
•   Interface - Select any one of the parameter such as Input Physical, Output Physical and Input Name.
11. Click Save. The new tool template is added to the list view.
12. Select a tool template and click the ellipsis to perform the following:
•   View Details - To view the details in the template.
•   Edit - To edit the parameters and fields in the template.
•   Delete - To delete the template from the list.
•   Duplicate - To duplicate the template in the list.

Note:   You can edit an existing template and the attributes associated with it as required, and save the updates as a new template while creating an Application Metadata Intelligence session.

You can export and import tool templates. The following are the advantages of exporting and importing tool templates:

  • Retrieve a tool template that was deleted unintentionally.
  • Deploy the template in another device.
  • Re-deploy the template in the device after GigaVUE-FM is upgraded to a new version (in case of issues in the existing solution).

To export a tool template:

  1. In the Tool Templates page, select a template that must be exported.
  2. Click the ellipsis and select Export.
  3. Save the file to the required location.

To import a tool template:

  1. Click Import.
  2. Select the required file from the local folder.
  3. Click Deploy to deploy the template.