drain3.ini

[SNAPSHOT]
snapshot_interval_minutes = 10
compress_state = True

[MASKING]
masking = [
          {"regex_pattern":"((?<=[^A-Za-z0-9])|^)(([0-9a-f]{2,}:){3,}([0-9a-f]{2,}))((?=[^A-Za-z0-9])|$)", "mask_with": "ID"},
          {"regex_pattern":"((?<=[^A-Za-z0-9])|^)(\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3})((?=[^A-Za-z0-9])|$)", "mask_with": "IP"},
          {"regex_pattern":"((?<=[^A-Za-z0-9])|^)(0x[a-f0-9A-F]+)((?=[^A-Za-z0-9])|$)", "mask_with": "HEX"},
          {"regex_pattern":"((?<=[^A-Za-z0-9])|^)(\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(\\.\\d+)?(Z)?)((?=[^A-Za-z0-9])|$)", "mask_with": "DATETIME"},
          {"regex_pattern":"((?<=[^A-Za-z0-9])|^)([\\-\\+]?\\d+):([\\-\\+]?\\d+):([\\-\\+]?\\d+).([\\-\\+]?\\d+)((?=[^A-Za-z0-9])|$)", "mask_with": "TIME"},
          {"regex_pattern":"((?<=[^A-Za-z0-9])|^)(\\d{4}-\\d{2}-\\d{2})((?=[^A-Za-z0-9])|$)", "mask_with": "DATE"}
          ]

[DRAIN]
sim_th = 0.4
depth = 10
max_children = 1000
max_clusters = 10240
extra_delimiters = ["=", ",", '"', "[", "]", "(", ")", ":", "{", "}", '\\', '\'']

[PROFILING]
enabled = True
report_sec = 30