Airlock Anomaly Shield cookies

Cookie name

Description

Example values

ML_ANOMALY

The cookie contains the same session tagging as the respective log message.

  • normal
  • anomalous
  • exception
  • redeemed

ENV_PREFIX_ML_ANOMALY=normal

ML_DATA

The payload is in JSON format and %-encoded.

Pretty printed example:

{ 
  "val": { 
    "con": 0.1, 
    "grm": 0.2, 
    "ifo": 0.3, 
    "mco": 0.4, 
    "scm": 0.5, 
    "tcs": 0.6 
  }, 
  "thr": { 
    "con": 0.11, 
    "grm": 0.22, 
    "ifo": 0.33, 
    "mco": 0.44, 
    "scm": 0.55, 
    "tcs": 0.66 
  } 
}

There are two different JSON top-keys: "val" (= values) and "thr" (= thresholds).

  • For every top-key, the full set of machine learning models with their current raw values is included:
  • "con" – connection metrics
  • "grm" – graph metrics cluster
  • "ifo" – isolation forest
  • "mco" – multiple countries
  • "scm" – status code meta
  • "tcs" – timing cluster

ENV_PREFIX_ML_DATA=%7B%22val%22%3A%7B[...]%22tcs%22%3A0.66%7D%7D