For ABS to start predicting various attacks types, the model needs to be trained.
The number of hours (default: 24 hours) is configurable for model training.
-
Set the value of training_period parameter using PingIntelligence Dashboard or the Global configuration update REST API.
Note:
For more detailed information about training the AI model, see Managing AI engine training.
-
Start the training.
Note:
The training starts as soon as ABS receives the first API traffic from ASE and continues for the number of hours set in the attack_initial_training parameter. Training occurs automatically when a new API is added.
-
Verify training completion.
-
To check the ABS training status, use the ABS admin API, which returns the
training duration and prediction mode. The API URL for the admin API is
https://<ip>:<port>/v4/abs/admin
.Note:ip and port number are of the ABS machine.
The following is a snippet of the output of the admin API:
If the prediction variable is true, ABS has completed training and is discovering attacks. A false value means that ABS is still in training mode."message": "training started at Thu Dec 26 12:32:59 IST 2019", "training_duration": "2 hours", "prediction": true
Note:ABS only detects attacks after the training period is over. During training, no attacks are generated.
-
To check the ABS training status, use the ABS admin API, which returns the
training duration and prediction mode. The API URL for the admin API is