GBUdb

Where is GBUdb stored?

GBUdb is stored in RAM. A snapshot is created once an hour by default and stored in your .gbx file.

When running SNF, a unique copy of the locally relevant GBUdb data is developed and maintained as part of a real-time machine learning system. The rulebase does not provide GBUdb data, but does provide training data indirectly by classifying the messages that are scanned on each system. Each system develops its own GBUdb data in real time based on the messages it sees and then shares this data with other SNF nodes so that the data at each node can be enhanced by what is seen in other parts of the network.No off-site lookups are performed in SNF. Everything is done locally without delay. Training data is shared during SYNC sessions about once per minute.

If you lose your GBUdb data then most of the time there is no consequence -- for a short time your system will not remember about some IPs, but over a very short period it will be reminded by the cloud. The exception to this will be any special records that you have set administratively white, black, or ignored. The GBUdbIgnoreList.txt file is a safety net for this. Of course drill-down and other training directives can make up for that as well.

Backing up the .gbx file is certainly a good thing to do, but it is not often a critical thing to do in our experience. GBUdb data tends to be so dynamic that losing the file and starting over is not generally a problem PROVIDED that the system is properly configured to recognize its infrastructure and the infrastructure of important partners.