Home
Guardian
Administrator Guide
Information and resources about the Administration section of Guardian, and the tasks that you can do in this part of the software.
Administration
System
Upload traces
The Upload traces page lets you upload trace files and select the options for the uploaded file.
Replay a trace file
After you have uploaded a trace file, you can replay it whenever you want.

Guardian
- Introduction
  An overview of Guardian.
- Installation Guide
  Information and resources on how to install Guardian, and the different options and settings that are available.
- Administrator Guide
  Information and resources about the Administration section of Guardian, and the tasks that you can do in this part of the software.
  - Administration
    - Administration page
      The administration page lets a user with administrator privileges configure settings and do other tasks.
    - Settings
    - System
      - General
        The General page lets you change the hostname and specify a login banner on a sensor.
      - Date and time
        The Date and time page lets you configure the date and time of a sensor.
      - Updates and licenses
        The Updates and licenses page lets you configure and manage the base software license and the licenses for optional features, such as Smart Polling, Threat Intelligence, Asset Intelligence, Arc, and Federal Information Processing Standards (FIPS).
      - Network interfaces
        The Network interfaces page shows information on how much network traffic is being ingested/captured.
      - Upload traces
        The Upload traces page lets you upload trace files and select the options for the uploaded file.
        Upload a trace file
        The Upload traces page lets you upload a trace file.
        Replay a trace file
        After you have uploaded a trace file, you can replay it whenever you want.
        Edit a note for a trace file
        After you upload a trace file, you can write a note for it, or edit an existing one.
        Delete a trace file
        After you have uploaded a trace file, you can delete it.
      - Export
        The Export page lets you export data in content packs.
      - Import
        The Import page lets you import data from multiple different sources, and in multiple formats.
      - Health
        The Health page lets you monitor the health of your sensors.
      - Audit
        The Audit page shows a list of all relevant user actions, from login/ logout to configuration operations, such as manually learning or deleting objects from the environment. This includes all recorded user actions based on the internet protocol (IP) address and username of the user who performed the action.
      - Data
        The Data page lets you selectively reset several kinds of data. You can select All, Only data, or None, depending on the type of user data that you want to reset.
      - Migration tasks
        The Migration tasks page gives you access to automated tasks that help you migrate the system configuration and settings to newer standards.
      - Operations
        The Operations page lets you reboot or shutdown the sensor, or manage the software updates for your sensor.
      - Support
        The Support page section lets you generate a support archive that you can then send to Customer Support when you need technical support.
      - Backup and restore
        The Backup and restore page lets you generate and schedule backup archives as well as restore the software from a backup.
- User Guide
  Information and resources about the main features of Guardian, and the tasks that you can do from the user interface (UI).
- Maintenance Guide
  Information about the maintenance tasks of Guardian, to help you administer and maintain the solution in a production environment.
- Print format documentation
  A list of all the print-format documentation that is available for Guardian.

Replay a trace file

After you have uploaded a trace file, you can replay it whenever you want.

As a result of playing traces, alerts can be generated. If the played file is artificial, the system might not recognize the alert timestamp. In this case, a value containing InvalidDate shows in the time column of the alert table.

In the top navigation bar, select
The administration page opens.
In the System section, select Upload traces.
The Upload traces page opens.
Choose a method.
- To replay a single file, go to step 4
- To replay multiple files, go to 5
To replay a single file, to the left of the applicable trace file, select the icon.
Replay multiple files.
1. Select multiple checkboxes for the items that you want to choose.
2. In the Actions column, select the icon.
  A menu shows.
3. From the menu, select Play selected.

The trace file(s) has (have) been replayed.