Skip to main content
Panther Knowledge Base

What is the syntax for dedup period in Panther?

QUESTION

What is the valid syntax for a rule's dedup period in Panther?

 

ANSWER

The correct syntax is: DedupPeriodMinutes

To use a number of days for your dedup period, multiply the number of days by 1440 and use the result for this value (1440 minutes in 1 day).

This also applies for DedupPeriodHours, DedupPeriodWeeks, DedupPeriodMonths, DedupPeriodParsecs, etc.

 

 

  • Was this article helpful?