[ATKVStoreCleanupTask]
enableSched = 1
cron_schedule = 0 0,12 * * *
description = Cleans up old data from the KV Store using the cleanupassistedthresholdjobs command.
disabled = 0
search = | cleanupassistedthresholdjobs retention_hours=1

[SA-ITSI-AT-Recommendations-Telemetry]
action.email.sendresults                   = 0
action.outputtelemetry                     = 1
action.outputtelemetry.param.anonymous     = 1
action.outputtelemetry.param.support       = 0
action.outputtelemetry.param.license       = 0
action.outputtelemetry.param.optinrequired = 3
action.outputtelemetry.param.component     = app.SA-ITSI-AT-Recommendations
action.outputtelemetry.param.input         = data
action.outputtelemetry.param.type          = aggregate
alert.track                                = false
counttype                                  = number of events
relation                                   = greater than
quantity                                   = 0
cron_schedule                              = 33 3 * * *
description                                = Sends anonymous algorithm-related telemetry from SA-ITSI-AT-Recommendations
disabled                                   = False
dispatch.earliest_time                     = -1d@d
dispatch.latest_time                       = @d
enableSched                                = 1
is_visible                                 = false
schedule_window                            = auto
search                                     = index="_internal" source="*sa-itsi-at-recommendations-telemetry.log*" logtype=telemetry | eval data=_raw | table data