What are two functions of numpoints in a rule and profile database? (Choose two.)

Question

Options

• ATo prevent premature triggering of a rule before a baseline is set and becomes active
• BTo ensure that the data points do not exceed a threshold value
• CTo fetch only values from the profile database that have numPoints greater than a certain
• DTo track the hour of the day for each data value

• A
  77% (44)
• B
  7% (4)
• D
  16% (9)

Explanation

In FortiSIEM, numPoints is a parameter used in rules and the profile database to ensure the reliability of statistical baselines and prevent anomalies from being falsely triggered due to insufficient data. 1. To prevent premature triggering of a rule before a baseline is set and becomes active. numPoints ensures that a rule does not trigger until a sufficient number of data points are collected for the baseline. Without enough data, the system may generate false positives due to the lack of a stable historical pattern. 2. To fetch only values from the profile database that have numPoints greater than a certain When querying the profile database, numPoints acts as a filter to ensure that only data points meeting a minimum threshold are considered for analysis. This prevents unreliable or insufficient historical data from affecting anomaly detection.

No community discussion yet for this question.