Update to META-Data Only

2026-07-18 17:16:10 +02:00
parent f1d88e8fb3
commit 10541fb22d
6 changed files with 584 additions and 321 deletions
@@ -50,4 +50,20 @@ BASELINE_SUPPRESS_FOR=1h
 #BASELINE_MIN_SAMPLES=84
 #BASELINE_MEDIUM_Z=3.0
 #BASELINE_HIGH_Z=5.0
-#BASELINE_MIN_COUNT=20
+#BASELINE_MIN_COUNT=20
+# Metadata-first storage
+# Raw XML is disabled by default. Enable only for short forensic retention.
+STORE_RAW_XML=false
+METADATA_BUCKET=1m
+EVENT_RETENTION=72h
+RAW_RETENTION=24h
+METADATA_RETENTION=4320h
+
+# Partition maintenance
+PARTITION_MAINTENANCE_ENABLED=true
+PARTITION_MAINTENANCE_INTERVAL=15m
+PARTITION_INTERVAL=3h
+PARTITION_AHEAD=24h
+PARTITION_BEHIND=6h
+# Compatibility fallback; table-specific retention values above take precedence.
+PARTITION_RETENTION=720h