The filtering step executes all search tagging and alert rules.
Enrichment name | language-detectionfiltering | ||
---|---|---|---|
Stage | processing | Enabled by default | Yes |
Table of Contents
Table of Contents | ||||
---|---|---|---|---|
|
...
The default configuration is to execute all filter steps once there is a batch of 20 items or one minute has passed since an item came in. As a result, the tagging delay by default is around one minute. These settings can be changed in the filtering.ini configuration file on the Squirro cluster nodes.