From 6c536113e8fa2102909c0f220b675eb48b100f18 Mon Sep 17 00:00:00 2001 From: dmachard <5562930+dmachard@users.noreply.github.com> Date: Tue, 17 Dec 2024 20:39:23 +0100 Subject: [PATCH] reduce default value for reducer to 2s --- docs/transformers/transform_newdomaintracker.md | 2 ++ docs/transformers/transform_trafficreducer.md | 2 +- pkgconfig/transformers.go | 2 +- 3 files changed, 4 insertions(+), 2 deletions(-) diff --git a/docs/transformers/transform_newdomaintracker.md b/docs/transformers/transform_newdomaintracker.md index b31ffdf2..c464f11d 100644 --- a/docs/transformers/transform_newdomaintracker.md +++ b/docs/transformers/transform_newdomaintracker.md @@ -27,6 +27,8 @@ The **New Domain Tracker** transformer identifies domains that are newly observe * `white-domains-file` (string) > path file to domain white list, domains list can be a partial domain name with regexp expression +* `persistence-file` (string) + > enable the persistence feature by specifying a file path ```yaml transforms: diff --git a/docs/transformers/transform_trafficreducer.md b/docs/transformers/transform_trafficreducer.md index d6d31ba6..23f58b64 100644 --- a/docs/transformers/transform_trafficreducer.md +++ b/docs/transformers/transform_trafficreducer.md @@ -35,7 +35,7 @@ transforms: reducer: repetitive-traffic-detector: true qname-plus-one: false - watch-interval: 5 + watch-interval: 2 unique-fields: - dnstap.identity - dnstap.operation diff --git a/pkgconfig/transformers.go b/pkgconfig/transformers.go index 8df48ca9..52823d80 100644 --- a/pkgconfig/transformers.go +++ b/pkgconfig/transformers.go @@ -41,7 +41,7 @@ type ConfigTransformers struct { Enable bool `yaml:"enable" default:"false"` RepetitiveTrafficDetector bool `yaml:"repetitive-traffic-detector" default:"false"` QnamePlusOne bool `yaml:"qname-plus-one" default:"false"` - WatchInterval int `yaml:"watch-interval" default:"5"` + WatchInterval int `yaml:"watch-interval" default:"2"` UniqueFields []string `yaml:"unique-fields" default:"[\"dnstap.identity\", \"dnstap.operation\", \"network.query-ip\", \"network.response-ip\", \"dns.qname\", \"dns.qtype\"]"` } `yaml:"reducer"` Filtering struct {