Analysis-server Configuration

AnalysisProperties

Name Default value Type Description

rsa.analysis.auto-analyze

true

boolean

{@code true} to automatically start analyze

rsa.analysis.definition-files

set

{@link Set} of definition files to be analyzed

rsa.analysis.nws

false

boolean

Enable NWS device support.

rsa.analysis.periodic-task-wait-time

1

seconds

Time period to wait between tasks.

rsa.analysis.time-allowance

15

seconds

Time to wait before issuing the query. Ex: If the time frame is 9-10pm and time allowance is 15 minutes, query at 10:15pm.

rsa.analysis.time-frame-interval

1

seconds

Time Interval to use for each analysis time frame as we advance forward

NwDbProperties

Name Default value Type Description

rsa.analysis.nwdb.host

localhost

string

NetWitness Core Query Broker host address

rsa.analysis.nwdb.password

string

NetWitness Core connection password

rsa.analysis.nwdb.port

50005

integer

NetWitness Core Query Broker port

rsa.analysis.nwdb.ssl

false

boolean

NwtWitness Core SSL flag

rsa.analysis.nwdb.start-time

string

The start time to analyze with the format of "yyyy-MM-dd HH:mm" UTC.

rsa.analysis.nwdb.user

admin

string

NetWitness Core connection user

AnalysisProperties$Temporal

Name Default value Type Description

rsa.analysis.temporal.enabled

true

boolean

Use temporal services instead of Repositories

rsa.analysis.temporal.max-entries

1000

integer

Maximum number of {@link java.util.Map} entries.

rsa.analysis.temporal.retention-period

30

seconds

The period of time to retain the data.