Observer GigaFlow

Documentation

Table of Contents

Observer GigaFlow Documentation

Documentation > Reference Manual for GigaFlow > System > Event Scripts

Event Scripts

Original Content

Located at System > Event Scripts.

This is where you can add your own scripts to create new workflows. A table lists existing scripts with the following information:

  • Script ID.
  • Script name.
  • Script description.
  • Script length in bytes.
  • Who created the script, e.g. Admin.
  • Time and date the script was created.
  • Is the script currently running? Yes or No.
  • The memory occupied by the script.
  • How many times the script has been run.
  • Average runtime in milliseconds.
  • The number of trigger events.
  • The number of dropped trigger events.
  • The trigger for the script.
  • Any errors.
  • Actions:
  • Refresh
  • Edit
  • Delete
  • Run

To add a script:

  • Click + in the top right.
  • Enter a name and description.
  • Select a trigger event from the drop-down menu. Possible triggers are:
  • Not set.
  • 1 Minute.
  • 5 Minute.
  • 15 Minute.
  • All ARP.
  • Black List Dst.
  • Black List Src.
  • Daily.
  • Device Restarts Sending Flows.
  • Device Stops Sending Flows.
  • Hourly.
  • Lost Neighbour.
  • New ARP.
  • New Device.
  • New IP.
  • New MAC.
  • New Neighbour.
  • One Off.
  • Profile Exception.
  • Sys Dst Network and Port Sweep.
  • Syn Dst Port Sweep.
  • Syn Dst Unreachable Server.
  • Syn Src Network and Port Sweep.
  • Syn Src Network Sweep.
  • Syn Src Port Sweep.
  • Syslog.
  • Enter the script in the main text box.
  • All scripts are JavaScript; the engine is Oracle's Nashorn.
  • Click Save Save icon..