This option helps you configure Machine Learning Activity monitoring parameters.
1. Click the Admin, and then select Machine Learning Settings.
EventTracker displays the Machine Learning Settings page.
|
Field |
Description |
|
|
Enable/Disable |
||
|
Enable Machine Learning |
This parameter is used for backward compatibility. Any time any user crosses 2500 (default) activities - EventTracker will generate an event. This is only for user and admin activity (IP, process, alerts and event-ids are excluded) |
|
|
Detector threshold |
||
|
Detector Threshold settings [number of activities] per user |
Event 3269 is generated when the total count of Admin, non- admin user activities exceed the threshold. Set the maximum event threshold per user that is pertinent to your environment. |
|
|
Purge Frequency |
||
|
Purge user data older than |
EventTracker purges the Machiine Learning activity data older than the configured number of days. |
|
|
Top Detection |
||
|
Top detections displayed |
Only the selected number of activities will be displayed on the left hand side pane of the ‘Model Explorer page. |
|
|
Group Level |
||
|
Enable multitenant |
It will monitor Machine Learning and can be set at different group level. |
|
|
Reset Machine Learning Data |
||
|
Reset |
Reset the existing baseline of Machine learning and start a new learning of the data. It deletes all the previous Machine Learning related data and not the customized jobs. |
|