Analysis-server Configuration
Analysis-server ConfigurationAnalysis-server Configuration
AnalysisPropertiesAnalysisProperties
- Name:
rsa.analysis.auto-analyze
- Default value:
true
- Type:
boolean
- Description:
{@code true} to automatically start analyze
- Name:
rsa.analysis.definition-files
- Default value:
- Type:
set
- Description:
{@link Set} of definition files to be analyzed
- Name:
rsa.analysis.nws
- Default value:
false
- Type:
boolean
- Description:
Enable NWS device support.
- Name:
rsa.analysis.periodic-task-wait-time
- Default value:
1
- Type:
seconds
- Description:
Time period to wait between tasks.
- Name:
rsa.analysis.time-allowance
- Default value:
15
- Type:
seconds
- Description:
Time to wait before issuing the query. Ex: If the time frame is 9-10pm and time allowance is 15 minutes, query at 10:15pm.
- Name:
rsa.analysis.time-frame-interval
- Default value:
1
- Type:
seconds
- Description:
Time Interval to use for each analysis time frame as we advance forward
NwDbPropertiesNwDbProperties
- Name:
rsa.analysis.nwdb.host
- Default value:
localhost
- Type:
string
- Description:
NetWitness Core Query Broker host address
- Name:
rsa.analysis.nwdb.password
- Default value:
- Type:
string
- Description:
NetWitness Core connection password
- Name:
rsa.analysis.nwdb.port
- Default value:
50005
- Type:
integer
- Description:
NetWitness Core Query Broker port
- Name:
rsa.analysis.nwdb.ssl
- Default value:
false
- Type:
boolean
- Description:
NwtWitness Core SSL flag
- Name:
rsa.analysis.nwdb.start-time
- Default value:
- Type:
string
- Description:
The start time to analyze with the format of "yyyy-MM-dd HH:mm" UTC.
- Name:
rsa.analysis.nwdb.user
- Default value:
admin
- Type:
string
- Description:
NetWitness Core connection user
AnalysisProperties$TemporalAnalysisProperties$Temporal
- Name:
rsa.analysis.temporal.enabled
- Default value:
true
- Type:
boolean
- Description:
Use temporal services instead of Repositories
- Name:
rsa.analysis.temporal.max-entries
- Default value:
1000
- Type:
integer
- Description:
Maximum number of {@link java.util.Map} entries.
- Name:
rsa.analysis.temporal.retention-period
- Default value:
30
- Type:
seconds
- Description:
The period of time to retain the data.