[IntelMQ-dev] Bot behaviour in case of unrecoverable errors

[Mika Silander]

Thanks for pointing out it doesn't take time into account but rather the number of failures. Still, I think we can use this instead of time.

Cheers, Mika 

----- Original Message -----
From: "Sebastian Wagner" <wagner at cert.at>
To: "Mika Silander" <mika.silander at csc.fi>
Cc: "intelmq-dev" <intelmq-dev at lists.cert.at>
Sent: Tuesday, 16 February, 2021 13:59:43
Subject: Re: [IntelMQ-dev] Bot behaviour in case of unrecoverable errors

Hi,

On 2/16/21 12:35 PM, Mika Silander wrote:
>  The aim with this "stop a bot after X consecutive failures within a time frame of Y minutes" was the need to stop a bot completely

The error-handling is not aware of the time. With error_procedure = stop
and error_max_retries = X-1 you can cover the first part. But the bot
will only stop, if the error occurs X times in a row.

Hope that helps
Sebastian

-- 
// Sebastian Wagner <wagner at cert.at> - T: +43 1 5056416 7201
// CERT Austria - https://www.cert.at/
// Eine Initiative der nic.at GmbH - https://www.nic.at/
// Firmenbuchnummer 172568b, LG Salzburg