9.3.2.7. set monitoring-engine

A - Introduction

The `monitoring-engine` command of the `set` sub-group enables applying an advanced configuration for the GCap sensor detection engine.

Note

If the number of signatures loaded by Sigflow is too large, the timeout value must be adjusted.


B - Prerequisites

  • User: setup

  • Dependencies: the detection engine must be switched off


C - Command

To change the grace period when starting the engine: `set monitoring-engine start-timeout SECOND`.
To change the grace period when the engine is stopped: `set monitoring-engine stop-timeout SECOND`.
To enable or disable the check of the controls: `set monitoring-engine {disable-sanity-checks|enable-sanity-checks}`.
If the `sanity-checks` option is set to `enable`, the detection engine starts only after verifying that at least one `monx` capture interface has been activated and that a cable is connected.

D - Procedure to change the grace period to 600 seconds when starting the engine

The command prompt is displayed.

(gcap-cli)
  1. To change the grace period to 600 seconds when starting the engine:

    1. Enter the command

      set monitoring-engine start-timeout 600
      
    2. Validate

  2. To check the value modification:

    1. Enter the command

      show monitoring-engine start-timeout
      
    2. Validate
      The system displays the current value
      Monitoring Engine Options:
      start timeout: 600s
      

E - Procedure to modify the grace period to 600 seconds when starting the engine

The command prompt is displayed.

(gcap-cli)
  1. To change the grace period to 600 seconds when stopping the engine:

    1. Enter the command

      set monitoring-engine stop-timeout 600
      
    2. Validate

  2. To check the value modification:

    1. Enter the command

      show monitoring-engine stop-timeout
      
    2. Validate
      The system displays the current value
    Monitoring Engine Options:
    Stop timeout: 600s
    

E - Procedure to disable the capture interface verification

The command prompt is displayed.

(gcap-cli)
  1. To disable the capture interface verification:

    1. Enter the command

      set monitoring-engine disable-sanity-checks
      
    2. Validate

  2. To check the value modification:

    1. Enter the command

      show monitoring-engine sanity-checks
      
    2. Validate
      The system displays the current value
      Monitoring Engine Options:
      Sanity checks disabled
      

E - Procedure to enable the capture interface verification

The command prompt is displayed.

(gcap-cli)
  1. To enable the capture interface verification:

    1. Enter the command

      set monitoring-engine enable-sanity-checks
      
    2. Validate

  2. To check the value modification:

    1. Enter the command

      show monitoring-engine sanity-checks
      
    2. Validate
      The system displays the current value
      Monitoring Engine Options:
      Sanity checks enabled