Exporting contexts and viewing external contexts

Contexts can be exported, allowing you to:

  • Share them with an external service for analysis,

  • Archive them in a storage space so that they can be deleted later from the log database.

Once they are exported, these contexts can be viewed in an SES Evolution administration console.

  1. Choose the Environment > Agent Logs menu.

  2. The full list of logs from all agents appears.

  3. Select a Context log. It is accompanied by the eye icon, or .

  4. In the button bar at the top, click on Contexts > Export contexts.

  5. The file is exported by default to the Desktop on the local workstation, and the name of the file is made up of the date and time followed by the name of the context. Change the name and location as needed.

  6. If necessary, add a description in the Comments field, then click on Export.
    A notification will appear when the export is complete, allowing you to open the exported .cab file. The archive may contain up to four files: contents.json, package.json, minicontext.txt and fullcontext.json, the last being optional.

You can select several contexts to be exported simultaneously. In this case, their names cannot be changed, and you cannot enter comments.

Contexts can also be exported from the context chart.

  1. Choose the Environment > Agent Logs menu.

  2. In the button bar at the top, click on Contexts > Open external context.

  3. Select the .cab file corresponding to the context you wish to view.

TIP
You can also drag and drop the .cab file into the blue area under the menu on the left side of the administration console.

The context chart then opens. You can use it in the same way as a context generated on your pool. For further information, refer to the section Analyzing contexts to understand attacks.
If you quit the chart, data will be kept for two minutes, and you can return to it by clicking on the Environment > Agent logs menu again. When the chart expires, you can open it to view it again.