Manage discovery intervals
You can enable or disable discovery and also update the discovery interval by using the update.sh script available in the util directory. If the training period is set to 1-hour, then discovered APIs are reported 1-hour from the time when ASE sends access logs. You can update these default values using the update script.
Execute the update.sh script
The update.sh script is available in the/opt/pingidentity/abs/util directory. Copy the script from the util directory to your MongoDB primary machine. You can change the training period and threshold simultaneously or individually.
You can access the script help by logging in to the MongoDB primary machine and running the following command:
/opt/pingidentity/mongo/update.sh help
Example:
/opt/pingidentity/mongo/update.sh --api_discovery true --discovery_update_interval 48
updating api_discovery to true
WriteResult({ "nMatched" : 1, "nUpserted" : 0, "nModified" : 0 })
updating discovery_update_interval to 48
The current values of the variables are:
attack_initial_training=1
attack_update_interval=24
api_discovery=false
discovery_update_interval=1
continuous_learning=true
discovery_initial_period=1
url_limit=100
response_size=100
window_length=24
discovery_subpath=3
percentage_diskusage_limit=80
Global Config successfully updated