Maximum delay when sending events (sec)

The maximum delay in sending events to the KATA/NDR server in seconds.

The default value is 30.

Maximum number of events in package

Maximum number of events in one package.

The default value is 1024.

This field is displayed only when integrating with Kaspersky Network Detection and Response (KATA).

Server poll frequency

Frequency of sending synchronization requests to the NDR server in seconds.

The default value is 450.

This field is displayed only when integrating with Kaspersky Network Detection and Response (KATA).

Enable event throttling

Enables or disables the regulation of the number of events sent to the KATA/NDR server.

Maximum number of events per hour

Maximum number of events per hour

The default value is 3000.

Event throttle threshold (percentage)

Event throttle threshold (percentage). Sending events is limited if ratio of events of one type (for example, events about registry changes) to the total number of events exceeds the set threshold (as a percentage).

The default value is 15.