Database Server Configurations - Administrator Guide - 6.5 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
6.5
Creation date
2022-09-28
Last date published
2024-11-12
End_of_Life
EoL
Category
Administrator Guide

Key

Description

Default

db.index.entry.disable

Enables/disables index entries. If you set to true, and disable entry indexing, you won’t be able to search entries in the Search everywhere search box, but you will be able to view these entries and have filters on them as usual. Disabling entry indexing saves substantial disk space.

false

DB.IndexBatchTimeout

The time, in milliseconds, for batch workers to wait for the batch to be full, before indexing. If it does not reach the batch size, it will timeout.

100

DB.IndexEntryContent

Whether to index War Room entries Using Bolt DB.

false

DB.MaxIndexBatchSize

The maximum number of items allowed for bleve bolt batch indexing. Define the batch size per index (it is more efficient to index in batches).

100

DB.MaxIndexQueueSize

The size of the indexing queue when pushing from a go routine into a queue that indexes the data.

50000

index.mapping.total_fields.limit

The maximum total field count in a query using Elasticsearch. Can be used if you experience feed ingestion issues.

1000

index.query.bool.max_clause_count

The maximum amount of clauses a query can contain. Relevant for Elasticsearch version 5.5x (and below) and 6.0 and later. Can be used if you experience feed ingestion issues.

1024

server.data.limit.message

Changes the following default message NOTE, too much data to present, content was truncated.

This occurs if data is large and the client takes too long to respond when partial data is sent from the server to the client.

N/a