UNIX_MATCH_UID = NO
UNIX_MATCH_GID = YES
+# Which modules to run (default: YES)
+START_MONITORING = YES
+START_REPORTING = YES
+START_ANALYSIS = YES
+START_UPDATE = YES
+
+# Path to directory containing sensor definitions.
+# If not set, will load from default location.
+#SENSOR_DIR =
+
+# Space separated list of trusted peers running update points
+UPDATE_POINTS =
+
[sensor-analysis]
-model = gaussian
+MODEL = gaussian
+# How many subsequent values required to flip anomaly label. (Default: 1)
+# E.g. After 3 subsequent anomaly reports, status change to anomalous.
+CONFIRMATION_COUNT = 3
[sensor-model-gaussian]
TRAINING_WINDOW = 1000