Management

Datasets and profiles are created, configured, and assigned through the DataStream web interface. For conceptual definitions and the type hierarchy, see Overview.

Deletion Constraints

A dataset cannot be deleted if it is assigned to a device or included in a profile. Likewise, a profile cannot be deleted if it is assigned to a device. Remove all associations before deleting. When a deletion is blocked, the UI displays the specific conflicting devices or profiles that must be unassigned first.

Creating a Dataset

Dataset creation uses a multi-step wizard:

Step 1 — Define Dataset

Enter the dataset name and description.

Step 2 — Configure Dataset

Configure the type-specific collection rules. The configuration interface adapts based on the dataset type — windows, wec, or linux — and each type also supports an optional preprocessing pipeline assignment. For the collectors available under each type, see Windows Datasets, WEC Datasets, and Linux Datasets. File-based log collection (linux_file_log_collector, windows_file_log_collector) is documented on the Linux and Windows Datasets pages.

Step 3 — Assign to Devices

Select one or more devices to assign this dataset to. The device list supports multi-select with search filtering.

Step 4 — Review and Create Dataset

Review the complete dataset configuration summary before creation. Verify assigned devices and collection rules.

Dataset Detail View

After creation, each dataset has a detail page with three tabs:

General Settings Tab

View and edit the dataset name, description, type, and status (active or passive).

Dataset Configuration Tab

View and edit the type-specific collection rules for this dataset.

Assigned Devices Tab

View and manage the list of devices assigned to this dataset. Add or remove device assignments.

Dataset Operations

• Clone: Create a copy of an existing dataset with all its configuration. The cloned dataset requires a new name and can be modified independently.
• Delete: Remove a dataset. A confirmation modal displays before deletion to prevent accidental removal.

Creating a Profile

Profile creation uses a multi-step wizard. Profiles are created with active status by default.

Step 1 — Define Profile

Enter the profile name and description.

Step 2 — Select Datasets

Select one or more existing datasets to include in this profile. The dataset list supports multi-select with filtering.

Step 3 — Assign to Devices

Select one or more devices to assign this profile to. Device assignment is optional and can be configured later.

Step 4 — Review and Create Profile

Review the profile summary including selected datasets and assigned devices before creation.

Profile Detail View

The profile detail page has three tabs: General Settings, Profile Configuration, and Assigned Devices — providing access to the profile's settings, its dataset composition, and its device assignments.

Device Integration

Datasets connect to devices through the Configure Data Collection workflow. When configuring a device's data collection:

1. A selection drawer displays available datasets and profiles
2. Select one or more datasets or profiles to assign
3. A confirmation modal with a switch control confirms the assignment change
4. The device begins collecting data according to the assigned dataset rules

Exclusive Assignment

A device can be assigned either datasets or a profile, not both. Assigning one type replaces any existing assignment of the other type.

Each device tracks its configuration mode (dataset or profile), determining whether it receives collection rules from individual datasets or from a profile.

Assigned datasets appear in the device's detail view under the Data Configuration tab (see Devices Management) and can be managed from either the device or dataset side of the relationship.