Training period status
API Behavioral Security (ABS) training status is checked using the ABS Admin application programming interface (API) which returns the training duration and prediction mode.
If the prediction variable is set to true, ABS has completed training and is discovering attacks. A false value means that ABS is still in training mode. The API Uniform Resource Locator (URL) for Admin API is: https://<ip>:<port>/v4/abs/admin. Here is a snippet of the Admin API output:
"message": "training started at Thu Jul 30 12:32:59 IST 2018", "training_duration": "2 hours", "prediction": true
|
ABS only detects attacks after the training period is over. During training, no attacks are detected. |