Policies

Click Settings -> Data Management -> Policies.

Policies
Health Check Eps Average: Every 5 minutes, the system compares the average EPS of the last 5 minutes with the average of the previous 5 minutes. If the value increases or decreases by more than the defined percentage, the system generates a warning log regarding EPS deviation. The default value is 30.

Note: The EPS Limit setting was removed from this page in version 6.4.107. The EPS value is defined in your license. You may contact the Logsign Customer Support Team to calculate the traffic (EPS) generated by the network devices/products in your environment.

Note: The Stop Logging When Disk Usage is Over setting was removed in version 6.4.92. The Disk Yellow Status threshold is 90%, and the stop logging threshold is a static value of 95%. These thresholds are not configurable.


Incident Policy
Incident Time Period (hours): Open incidents that are older than this period are automatically closed by the system. The value can be between 0 and 168 hours. The default value is 168 (one week). If you enter 0, the system uses 168.
Incident Count Limit: Open incidents whose alert count reaches this limit are automatically closed by the system. The value can be between 0 and 200. The default value is 200. If you enter 0, the system uses 200.
When the system closes an incident, it marks the incomplete tasks of the incident as not completed and answers the open decisions automatically.


Index Policy
Do not modify any settings for standalone Logsign USO deployments.

For cluster configurations, please contact the Logsign Support Team.

Was this article helpful?
1 out of 1 found this helpful

Articles in this section

See more
Become a Certified Logsign User/Administrator
Sign-up for Logsign Academy and take the courses to learn about Logsign USO Platform in detail. Enjoy the courses, and get your badges and certificates. In these courses, you'll learn how to use Logsign in your work and add value to your career.
Visit Our Blog
Our Logsign USO Platform illustrate our expertise. So do the blog. Through our blog posts, deepen your knowledge on various SecOps topics or get updated about important news & modern approaches for cybersecurity. Get into the habit of reading valuable information provided by Logsign. Be a step ahead.