Airlock Events anpassen

In der Datei /opt/slt/ses/taclog/proxy/etc/logsurfer.conf.user.custom können die Events konfiguriert werden. Hier können events generell aktiviert/ deaktiviert werden bzw. das Prüfintervall und die Anzahl nötiger Meldungen festgelegt werden:

# blocked 5 requests in 2 minutes
WR_SG_BLOCK_invalid_enable=true
WR_SG_BLOCK_invalid_num=5
WR_SG_BLOCK_invalid_range=120

# 10 or more 404  in 1 minute
WR_SG_SUMMARY_404_enable=true
WR_SG_SUMMARY_404_num=10
WR_SG_SUMMARY_404_range=60

# responsetime is higher than 3 seconds 5 or more times in 2 minutes
WR_SG_SUMMARY_BackendResponseTime_enable=true
WR_SG_SUMMARY_BackendResponseTime_num=5
WR_SG_SUMMARY_BackendResponseTime_range=120

# icap time is higher than 2 seconds 3 or more times in 1 minute
WR_SG_SUMMARY_IcapResponseTime_enable=true
WR_SG_SUMMARY_IcapResponseTime_num=3
WR_SG_SUMMARY_IcapResponseTime_range=60

# dns lookup time is higher than 1 second 3 or more times in 1 minute
WR_SG_SUMMARY_lookup_enable=true
WR_SG_SUMMARY_lookup_num=3
WR_SG_SUMMARY_lookup_range=60