mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-08-30 11:19:19 +02:00
DontScanBefore
New field that'll stop the memory scanner from scanning before an indicated date. Leaving it empty lets the scanner scan everything. The regex for it allows YYYY-MM-DD and ensures months only allow the max number of days (no June the 43rd).
This commit is contained in:
@@ -1539,6 +1539,7 @@ soc:
|
||||
DetectionEngineer: gemma@SOAI
|
||||
useMemory: true
|
||||
useMemoryScanner: false
|
||||
dontScanBefore: ""
|
||||
memoryScanIntervalSeconds: 300
|
||||
memoryProximityThreshold: 0.8
|
||||
messageProximityThreshold: 0.5
|
||||
|
||||
@@ -853,6 +853,12 @@ soc:
|
||||
description: Enables the memory scanner for automatic memory extraction from historical sessions.
|
||||
global: True
|
||||
forcedType: bool
|
||||
dontScanBefore:
|
||||
description: A date specifying how far back to scan for memories. Must be in YYYY-MM-DD format.
|
||||
regex: "^(\d{4}-((0[13578]|1[02])-(0[1-9]|[12]\d|3[01])|(0[469]|11)-(0[1-9]|[12]\d|30)|02-(0[1-9]|[12]\d)))?$"
|
||||
regexFailureMessage: Expecting date in YYYY-MM-DD format
|
||||
global: True
|
||||
advanced: True
|
||||
memoryScanIntervalSeconds:
|
||||
description: How long to wait in seconds between attempts to scan sessions for new memories.
|
||||
global: True
|
||||
|
||||
Reference in New Issue
Block a user