Anomaly Shield threshold tuning can be done in the analytics_indicator_thresholds.json
file. The thresholds can be configured as default settings and as individual settings per application.
You can read out the current threshold values in JSON format using the export_thresholds
command of the CLI analytics tool.
- The JSON file is located under
/opt/airlock/ml-service/conf/
.analytics_indicator_thresholds.json
- Security Gate Expert Settings can be set over the graphical UI in Section - Security Gate.
Note that any changes in the analytics_indicator_thresholds.json
file require restarting the ml-service:
systemctl restart airlock-ml-service