Data Management

HDFS can correlate thousands of terabytes of ingested data from  NetFlow and Threat Intelligence feeds to data stored in Spectre's Postgres SQL database. Spectre maintains a persistent relationship with these data feeds, enabling you to true-up the information in your reference sources against the most authoritative network index: Yours–produced with Spectre.

In the Spectre application, browse to Admin > Tables > Add Table to explore this very recent addition to Spectre's data management capabilities. There you'll find options to create tables that enable you to correlate and report on data residing in Spectre's Postgres and HDFS data stores.

You can choose to create any of following table types:

  • Managed Primary - Enables you to create a table using data that resides within Spectre's postgres structured database. Select managed primary when you expect the data comprising your table to change frequently.
  • Reference Table -  Enables you to create a table using data that resides within Spectre's postgres structured database. Select reference table when you expect the data in your table to change slowly and remain relatively static.
  • Unmanaged Primary - Enables you to access data stored in Spectre's unstructured, distributed HDFS data store. 
  • External Table - Enables you to create a table from data stored in an external database.
  • View - Enables you to create a view that combines information from multiple tables of any type.