PingIntelligence

Managing discovery intervals

You can enable or disable discovery and update the discovery interval by using the update.sh script available in the util directory. If the training period is set to 1 hour, then discovered application programming interface (API)s are reported 1 hour from the time when API Security Enforcer (ASE) sends access logs. You can update these default values using the update.sh script.

About this task

To run the update.sh script:

Steps

  1. Copy the update.sh script from the /opt/pingidentity/abs/util directory to your MongoDB primary machine.

    You can change the training period and threshold simultaneously or individually.

  2. Access the script help by logging in to the MongoDB primary machine and running the following command:

    /opt/pingidentity/mongo/update.sh help

    Result:

    /opt/pingidentity/mongo/update.sh --api_discovery true --discovery_update_interval 48
updating api_discovery to true
WriteResult({ "nMatched" : 1, "nUpserted" : 0, "nModified" : 0 })
updating discovery_update_interval to 48
The current values of the variables are:
attack_initial_training=1
attack_update_interval=24
api_discovery=false
discovery_update_interval=1
continuous_learning=true
discovery_initial_period=1
url_limit=100
response_size=100
window_length=24
discovery_subpath=3
percentage_diskusage_limit=80

Global Config successfully updated