Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update default timeouts #1294

Merged
merged 3 commits into from
Jul 22, 2024
Merged

Update default timeouts #1294

merged 3 commits into from
Jul 22, 2024

Conversation

nhakmiller
Copy link
Contributor

@nhakmiller nhakmiller commented Jul 19, 2024

Background

Some customers were experiencing timeouts from some of the new OOTB Correlation Rules. This bumps the default timeout for some of the Correlation Rules with 1 hour+ lookback windows. In particular there was a two or three minute timeout for some Correlation Rules looking back at 12-24 hours of data.

Changes

  • For Correlation Rules with lookback windows over 1 hour, increase the default timeout
  • Actually, bumped everything based on some feedback from users in high volume environments

Testing

  • pat test

@nhakmiller nhakmiller requested a review from a team as a code owner July 19, 2024 22:29
@nhakmiller nhakmiller changed the base branch from release to main July 19, 2024 22:30
Copy link

😱
looks like some things could be wrong with the packs

[INFO][root]: ignoring file dependabot.yml

@arielkr256 arielkr256 merged commit 8ddde32 into main Jul 22, 2024
6 checks passed
@arielkr256 arielkr256 deleted the nhakmiller-update-timeout branch July 22, 2024 14:29
@arielkr256 arielkr256 added the tuning detection tuning label Sep 10, 2024
@arielkr256 arielkr256 added the correlation_rules Correlation rules establish correlations across logs, identify anomalies, and model complex attack b label Sep 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
correlation_rules Correlation rules establish correlations across logs, identify anomalies, and model complex attack b tuning detection tuning
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants