snf_engine.xml

<node/> - <gbudb/>

<training/>

The training section provides controls for a number of automated GBUdb training mechanisms:

• Source header directives - used when an X- header will be provided in the message that describes the original source IP for the message.
  
• Drilldown header directives - provide a mechanism for GBUdb to automatically learn to ignore infrastructure IPs by matching strings in specific Received headers.
• Bypass header directives - provide a mechanism for disabling GBUdb training when specific headers are present in a message.
• White header and result code directives - provide a mechanism for recognizing cases where a message source should receive a "good" hit.

It is also possible to disable GBUdb training:

<training on-off='on'>

The on-off='on' attribute enables and on-off='off' disables GBUdb training.

Please email support@armresearch.com with any questions.