Configuration

Agent settings typically include:

• Agent ID — Unique identifier sent with each event.
• Server endpoint — Base URL of the API (API Gateway prod stage URL + /events for upload).
• Rule folder — Path to detection-rules JSON files (local or synced).
• Upload interval / batch size — Controls how often events are sent.
• Authentication — API token or headers as implemented in EventUploader (see repository).

Exact keys and file names are in appsettings.json and the Settings screen in the WPF UI.

caution

Never commit secrets (API tokens, keys) to public repositories. Use environment variables or secure configuration in production.

For rule sync from the cloud (if enabled), see the agent README and RuleSyncService in code.