Forum Discussion

Approxee's avatar
Approxee
Icon for Nimbostratus rankNimbostratus
Sep 01, 2017

ASM Manual Entity Collapsing

I have configured URI based parameter selective learning (Manual Policy Learning). I get a lot of parameters with very simular names all violating the same signatures. I thought if I configured a wildcard matching the paramters and deleted the learning suggestions, it would make the learning suggestions again on the new wildcard parameter. - but I cant get this to work :-(

 

Say I have (learning suggestions):

 

  • Para1 violating signature 200012345
  • Para2 violating signature 200012345
  • Para3 violating signature 200012345
  • Para4 violating signature 200012345

If I delete the above and add a wildcard of para? - If I clear the original learning suggestions and wait.

 

I am expecting this to happen - Learning suggestion on wildcard on parameter of Para? to disable signature 200012345

 

but I get

 

  • Para1 violating signature 200012345
  • Para2 violating signature 200012345
  • Para3 violating signature 200012345
  • Para4 violating signature 200012345 (same again)

So I am thinking, of three possibilities

 

  1. This is correct behaviour
  2. My Wildcard is not matching as I got the syntax wrong
  3. I delete the learning suggestions and add the signature override manually and this will stop the specific parameter learning suggestions

I dont know what the expected behaviour is, I thought this would work, but maybe I have to add the signatures to the new wildcard parameter manually.

 

Kind Regards GM

 

1 Reply

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus

    If you've enabled Selective entities learning then ASM want to explicitly add a parameter entry if it needs to make an exception. So what you are seeing is correct. The alternative would be to loosen the policy on para? wildcard, which may be too loose.

     

    In your case I wud create para? and then add the signature exception manually. Alternatively, if you had never (wildcard) set then it would make the suggestion on para? instead.

     

    Hope this helps,

     

    N