{% extends "layout2.html" %} {% load i18n %} {% load static %} {% block css_include %} {% endblock %} {% block js_include %} {% endblock %} {% block content %} Save {% translate "Darwin Security policy" %} {% translate "Name" %}: {% translate "The friendly name of your policy (should be unique)" %} {% translate "Description" %}: {% translate "A description for your policy" %} {% translate "Filters list" %} {% translate "Enabled" %} {% translate "Filter name" %} {% translate "Threshold" %} {% translate "Log Level" %} {% translate "NB Thread" %} {% translate "Cache size" %} {% translate "Config" %} {% translate "" %} ${filter.threshold} ${filter.nb_thread} ${filter.cache_size} {% translate "Filter" %} {% translate "Filter" %}: {% translate "The type of darwin filter this instance is" %} {% translate "Enabled" %}: This filter is not installed, it can be enabled but won't be started as long as it's not available {% translate "Whether this filter should be started" %} {% translate "Threshold" %}: {% translate "The threshold above which the filter should trigger an alert: filters return a certitude between 0 and 100 (inclusive), this tells the filter to raise an alert if the certitude for the data analysed is above or equal to this threshold" %} {% translate "Log Level" %}: {% translate "The logging level for this particular instance (closer to DEBUG means more info, but also more disk space taken and less performances overall)" %} {% translate "Number of threads" %}: {% translate "The number of concurrent threads to run for this instance (going above 10 is rarely a good idea)" %} {% translate "Weight" %}: {% translate "The weight of this filter when calculating mean certitude during multiple calls to different filters with the same data" %} {% translate "Cache size" %}: {% translate "The number of cache entries the filter can have to keep previous results" %} {% translate "Enable continuous analysis" %}: {% translate "Filter will buffer data continuously, and analyse batches at configured intervals" %} {% translate "Analysis frequency" %}: {% translate "Number of seconds to cache data before analysing batch" %} {% translate "Minimum batch size" %}: {% translate "Minimal number of entries to require before launching analysis" %} {% translate "Override Rsyslog inputs" %}: {% translate "Activate custom calls to Darwin, using specific fields from Rsyslog parsing" %} {% translate "Rsyslog inputs" %}: filter.mmdarwin_parameters = newTags"/> {% translate "A list of fields to use during custom darwin calls from Rsyslog. The fields should respect rsyslog configuration syntax (e.g $!root_container!field). All fields will be taken and used in order in a single call to the configured Darwin filter" %} {% translate "See the" %} {% translate "documentation" %} {% translate "for more details" %} {% translate "Additional Rsyslog enrichment tags" %}: filter.enrichment_tags = newTags"/> {% translate "A list of tags to add in case enrichment is activated on source, and filter returns a certitude above threshold (a match)" %} {% translate "Redis expire" %}: {% translate "Number of seconds to cache connection, after this delay the connection will be considered new again" %} {% translate "Advanced" %} {% translate "Max token" %}: {% translate "The maximum number of tokens from domain to take into account during calculation" %} {% translate "Database" %}: {% translate "The lookup file to use for detection" %} {% translate "Model" %}: {% translate "The model file to use with this filter" %} {% translate "Model" %}: {% translate "The model file to use with this filter" %} {% translate "Percent more before alert" %}: {% translate "The percentage of upper variation admitted before raising an alert" %} {% translate "Percentage is expressed as quotient (write 0.1 for 10%)" %} {% translate "Percent less before alert" %}: {% translate "The percentage of lower variation admitted before raising an alert" %} {% translate "Percentage is expressed as quotient (write 0.1 for 10%)" %} {% translate "Advanced" %} {% translate "Percent more before warning" %}: {% translate "(optional, keep empty if unsure)" %} {% translate "The percentage of upper variation admitted before raising a warning" %} {% translate "Percentage is expressed as quotient (write 0.1 for 10%)" %} {% translate "Percent less before warning" %}: {% translate "(optional, keep empty if unsure)" %} {% translate "The percentage of lower variation admitted before raising a warning" %} {% translate "Percentage is expressed as quotient (write 0.1 for 10%)" %} {% translate "Minimal variation" %}: {% translate "(optional, keep empty if unsure)" %} {% translate "The minimal variation to require between the expected and real values before raising warnings or alerts" %} {% translate "This is useful to avoid raising warnings/alerts too quickly when expected differences ought to be small" %} {% translate "It takes precedence over calculated percentages if they result in smaller accepted variation" %} {% translate "Lower absolute" %}: {% translate "(optional, keep empty if unsure)" %} {% translate "The absolute lower value before raising alerts (percentages for lower warnings/alerts are ignored)" %} {% translate "This is useful when alerts should be raised only when observed values drop below a certain threshold (upper warnings/alerts are still taken into account)" %} {% translate "lower percentages are ignored" %} {% endblock %} {% block jquery_code %} let object_id = '{{ object_id }}' let clone = {{ clone }} let darwin_filters = {{ darwin_filters|safe }} let darwin_policy_list_uri = "{% url 'darwin.policy.list' %}" let darwin_policy_api_uri = "{% url 'darwin.policy.api' %}" let application_reputation_ctx_uri = "{% url 'applications.reputation_ctx.api' %}" let darwin_filter_ressources_uri = "{% url 'darwin.filter.api' %}" {% endblock %}