global: pcapengine: SURICATA pipeline: REDIS push: enabled: true highstate_interval_hours: 2 debounce_seconds: 30 drain_interval: 15 batch: '25%' batch_wait: 15