You can enable or disable discovery and also update the discovery interval by using the
update.sh
script available in the util
directory. If
the training period is set to 1-hour, then discovered APIs are reported 1-hour from the
time when ASE sends access logs. You can update these default values using the update
script.
Execute the update.sh script
The update.sh
script is available in
the/opt/pingidentity/abs/util
directory. Copy the script from the
util
directory to your MongoDB primary machine. You can change the training
period and threshold simultaneously or individually.
You can access the script help by logging in to the MongoDB primary machine and running the following command:
/opt/pingidentity/mongo/update.sh help
Example:
/opt/pingidentity/mongo/update.sh --api_discovery true --discovery_update_interval 48
updating api_discovery to true
WriteResult({ "nMatched" : 1, "nUpserted" : 0, "nModified" : 0 })
updating discovery_update_interval to 48
The current values of the variables are:
attack_initial_training=1
attack_update_interval=24
api_discovery=false
discovery_update_interval=1
continuous_learning=true
discovery_initial_period=1
url_limit=100
response_size=100
window_length=24
discovery_subpath=3
percentage_diskusage_limit=80
Global Config successfully updated