modality-reflector import

Command: modality-reflector import <plugin subcommand>

Run a single data import operation, generally from one or more files. This operation is expected to process all the given data and then complete. Each import operation runs a single importer plugin. For details on a specific importer see the relevant reference.

TIP

To see the list of currently installed importer plugins run modality-reflector import -h and look at the bottom of the output.

# Example

$ modality-reflector import ctf ctf-data-dump
Ingest edge id -138046527884396485694764884001530647477
Find data imported with this tool with a filter like:
_.timeline.ingest_edge_id = -138046527884396485694764884001530647477

# Options

TIP

Note that both modality-reflector itself and the plugin subcommand can accept command line options. Options passed before the plugin name argument will be passed to import. Options passed after the plugin name argument will be passed to the plugin.

<plugin subcommand> - Name of the importer plugin to run. You must specify exactly one importer plugin. To see the list of installed importer plugins run modality-reflector import -h and look at the bottom of the output. Each importer plugin may have its own configuration and command line options. For details on a specific importer see the relevant reference.

--auth-token-file <path to auth token file> - Use the given auth token. If not specified, the reflector will attempt to use an auth token from one of the following locations. These locations are listed in descending order of precedence, i.e. number 1 takes precedence over numbers 2-3:

  1. The MODALITY_AUTH_TOKEN environment variable
  2. {current_working_directory}/.modality-reflector-auth-token
  3. {parent directory of config file}/.modality-reflector-auth-token.

For more information on creating and using auth tokens, see the modality user reference.

--config <configuration file> - Use configuration from the given file.

--ingest-protocol-parent-url <ingest-protocol-parent-url> - Set the URL to which this reflector will send its collected data. This will generally either be a URL for modalityd or for another reflector in a chain. Overrides the ingest.protocol-parent-url property of the config file.

-k, --insecure - Allow insecure connections.