The purpose of this repository is to allow Splunk community to report issues and enhancements requests
2
stars
0
forks
source link
enhancement - Adaptive Thresholding - Allows to control the review period through the argument review_period_no_days at the level of the adaptive tracker #663
enhancement - Adaptive Thresholding - Allows to control the review period through the argument review_period_no_days at the level of the adaptive tracker
In this issue, we introduce a new argument to the Adaptive delay custom command which controls the period of time used to identify entities to be reviewed over time following a change made the Adaptive Treshold backend.
The argument review_period_no_days accepts 3 period options: 7, 15 or 30 days for the period of review.
After the upgrade, TrackMe will automatically update existing and active trackers through the schema upgrade.
enhancement - Adaptive Thresholding - Allows to control the review period through the argument review_period_no_days at the level of the adaptive tracker