Skip to main content

How to set a padding period for the connector?

  • September 26, 2024
  • 4 replies
  • 19 views

vanitharaj1208
Forum|alt.badge.img+14

 

A delay can occur between the time that Google SecOps SIEM indexes an alert and when indexing completes. To mitigate the risk of missing alerts, set a padding period for the connector. Additionally, increase the connector timeout. A significant padding period can negatively impact connector performance.

https://cloud.google.com/chronicle/docs/soar/marketplace-integrations/google-chronicle#overview 

4 replies

vanitharaj1208
Forum|alt.badge.img+14
  • Author
  • Silver 2
  • September 27, 2024

Can anyone reply? 


SoarAndy
Staff
Forum|alt.badge.img+12
  • Staff
  • September 27, 2024

Have you looked at the connector and tried this?

 


vanitharaj1208
Forum|alt.badge.img+14
  • Author
  • Silver 2
  • September 30, 2024

How to calculate MAX hours backwards.. example : if 500 alerts triggered in 1 hours.  

default is 1 hour n max is 1 week


vanitharaj1208
Forum|alt.badge.img+14

@SoarAndy  How is Max hours backwards is calculated like based on what?