audit.ini [AlertRule_mass_delete]
The block [AlertRule_mass_delete] of settings/audit.ini, with 8 setting(s).
Never edit settings/audit.ini itself: an update replaces it. Put the settings you change in an override, which wins over the shipped file:
settings/override/audit.ini.append.phpfor every siteaccess,settings/siteaccess/<siteaccess>/audit.ini.append.phpfor one siteaccess,extension/<extension>/settings/audit.ini.append.phpin an extension (read when the extension is active).
Class
Many nodes removed by one user in a short time (children are counted).
Default: threshold.
# settings/override/audit.ini.append.php
[AlertRule_mass_delete]
Class=threshold
*/ ?>Event
Default: content.node.remove.*.
# settings/override/audit.ini.append.php
[AlertRule_mass_delete]
Event=content.node.remove.*
*/ ?>Threshold
Default: 500.
# settings/override/audit.ini.append.php
[AlertRule_mass_delete]
Threshold=500
*/ ?>Window
Default: 600.
# settings/override/audit.ini.append.php
[AlertRule_mass_delete]
Window=600
*/ ?>GroupBy
Default: actor.user_id.
# settings/override/audit.ini.append.php
[AlertRule_mass_delete]
GroupBy=actor.user_id
*/ ?>CountChildren
Default: enabled.
# settings/override/audit.ini.append.php
[AlertRule_mass_delete]
CountChildren=enabled
*/ ?>Severity
Default: critical.
# settings/override/audit.ini.append.php
[AlertRule_mass_delete]
Severity=critical
*/ ?>Sinks
Default: a list of 2: syslog, mail.
# settings/override/audit.ini.append.php
[AlertRule_mass_delete]
# an empty "Sinks[]" first replaces the shipped list; without it the items are added
Sinks[]
Sinks[]=syslog
Sinks[]=mail
*/ ?>Related
Generated by ./console exp:help:examples from settings/audit.ini. Do not edit this page: change the source and generate again (how). Free documentation: GFDL 1.3 or later.