Plugin Update

Updating Plugins (PRM Files) and TASL Scripts

This section describes the method for updating Tenable Log Correlation Engine plugins (files with a .prm extension) and TASL scripts. Plugin updates occur over a HTTPS connection at a set interval. The default update interval is set to 3 days, but can be increased or reduced if required. The Tenable Log Correlation Engine interface Plugin Update section, which is found in the Configuration section under Feed Settings, can be easily used to update all plugins along by clicking the Update Plugins button.

The directories containing the PRM files and TASL scripts are specified in the /opt/lce/daemons/plugins directory. When you update plugins, the files contained in the /opt/lce/daemons/plugins directory, which are plugins and correlation scripts (TASL) will be archived to the /opt/lce/daemons/plugins_archive directory. The backups of the files in the TASL directory will appear in the plugins_archive directory as a file such as tasls.tar.gz, and the backups of the files in the plugins directory will appear in the plugins_archive directory as a file such as lce.tar.gz. The backup is only kept until the next plugin update.

Offline Updates

The Offline Plugin Update section can be found in the Configuration section of the Tenable Log Correlation Engine interface under Feed Settings. It allows for a .tar file of the Tenable Log Correlation Engine plugins to be uploaded by browsing to the file, and then clicking the Process Plugins button.

Option	Description
Offline Update File	Used to upload a new set of plugins to the Tenable Log Correlation Engine. This is only required if an Tenable Log Correlation Engine server does not have internet access.
Process Update	Clicking this button will complete the update process using the plugins file that was uploaded.