[IntelMQ-dev] Bot behaviour in case of unrecoverable errors

[Mika Silander]

Hi,

 Trying to assess what safeguards are sufficient: what happens when a bot has some internal failure and it "dies"?
Will intelmq restart the bot automatically or will it be up to the admin of intelmq to manually restart it?
And if automatic restarts is the norm, how could one stop the bot from processing new incoming messages if say,
X consecutive failures like these have happened within the time frame of the last 5 minutes? By writing some log
entries at bot startup and then making the bot itself analyze the log at every restart? 

 I'm trying to make sure a burst of erroneous/malformed events are not accidentally forwarded by a malfunctioning
or partially functioning bot.

Cheers, Mika