What happens when a custom signature times out?

What happens when a custom signature times out?

0
Created On 09/26/18 20:30 PM - Last Modified 07/19/22 23:12 PM


Symptom


What happens when a custom signature times out?



Resolution


If a custom signature cannot complete within 5 minutes, it will generate an error alert with the error message: "Custom Signature took too long to run."  However, note that if this occurred during custom signature test or validation, the custom signature will still "complete" and hence it will pass the test.  Also, any alerts that were generated during the same signature run (prior to time out) will be dropped.  For example, if you are examining security groups, and your script already called fail() prior to hitting an infinite loop, only the error alert will persist.



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm4uCAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail