FAQ
Smarter by Design.Simpler for Business
TR7Enterprise Application Delivery & Security Platform

English

Türkçe

English

Türkçe

Appearance

Intermediate

Can I stop a running analysis; how many analyses can be kept at most? ​

Short answer

Yes. Stop Process in the details window that opens when the progress bar on the mode card is clicked ends the analysis process; the process closes with the "User ended the process" error, no partial result is produced and a record that carries an error message stays in the Analyze list. If the applying process is stopped, no rule is written. The analysis quota is 250 records across the device and 50 per vService; the counting is per analysis and host group row (an analysis with three groups uses three rows) and is verified before the analysis is started (scope and limits). When the quota is full, the "Analysis limit exceeded … Please delete old analysis data" error is received. The records are not deleted by themselves; they are deleted row by row with Delete in the Analyze list, when the last row of an analysis is deleted, the analysis and its applying history are removed entirely, and the rules applied before are not touched. At most 3 applying records are kept for each analysis; the counting is per analysis record, and since every applying leaves a separate record for every host group it is applied to, in an analysis with three groups a single applying fills all three records; when a new record comes, the oldest one is deleted. There is no limit on the number of analyses running at the same time; only one applying is done to the same host group at a time.

Problem: An Analysis Started with Wrong Settings Is Running or the Quota Is Full ​

An analysis started with a wrong date range or filter needs to be stopped without waiting, or old records need to be deleted because the analysis quota is full.

Solution: Two Methods ​

Your situationSuitable method
I want to stop a running analysisMethod 1: Stop process
The quota is full; I want to delete old analysis recordsMethod 2: Delete from the Analyze list
  • How it works The running analysis or applying process is ended; no partial result is produced in the analysis, no rule is written in the applying.
  • Where it is openedWAF Management → the progress bar on the mode card of the host group → details window → Stop Process
  • Requirement Modify permission in the WAF area; the Stop process request additionally requires modify permission in the Load Balancer area
  • vService type HTTP

Step-by-Step Configuration ​

1
Adım 1 Open the details window

In the Left Monitor Panel → WAF-Protected vServices → vService → WAF Management tab, the progress bar on the mode card of the host group is clicked; the details window that carries the Task type, Parsed raw data, Used logs and Filter reasons fields opens (progress bar).

2
Adım 2 Stop the process

Stop Process in the button bar of the window is clicked; the process closes with the "User ended the process" error.

Verification ​

1Analyze listTR7 side

The Analyze list is opened with the house icon on the mode card and the record is clicked.

ExpectedError message: User ended the process
The record continues to count toward the quota; it is deleted with Method 2.

Method 2: Delete from the Analyze List ​

  • How it works The quota is freed by deleting the selected analysis and host group rows; the applied rules do not change.
  • Where it is openedWAF Management → the house icon on the mode card → Analyze list → Delete
  • Requirement Modify permission in the WAF area
  • vService type HTTP

Step-by-Step Configuration ​

1
Adım 1 Open the Analyze list

On the WAF Management tab, the house icon next to the Analysis & Learning row on the mode card of the host group is clicked; the Analyze list of that group opens. For the rows of all the groups, the house icon on the Virtual Host Groups card is used.

2
Adım 2 Select the rows

The rows to be deleted are selected.

3
Adım 3 Click Delete

Delete is clicked; the Are you sure? question opens.

4
Adım 4 Confirm

Yes is clicked. In collective analyses, every group row is deleted separately and counted separately in the quota (How does the quota work when analyzing many host groups collectively?).

Verification ​

1New analysisTR7 side

A new analysis is started.

ExpectedNo Analysis limit exceeded error

Common Mistakes ​

  • Expecting the partial result of the stopped analysis. No partial result is produced; the analysis is started again with the correct settings.
  • Leaving the faulty record in the list. It continues to count toward the quota.
  • Thinking that the quota is the number of analyses. In a collective analysis, every selected group uses a separate row.
  • Thinking that Delete reverts the applied rules. Deleting removes only the analysis record; the rules stay as they are (Can I revert a learned rule?).

How it is done in the documentation

Related questions