SLBrain – End of Life?

Solved884 viewsCorrelation
1
0 Comments

I recently found this Dojo page describing functionality retirements. I seem to recall that SLBrain.exe was only used for correlation rules using the old/legacy engine. Is this correct? If so, are there any End of Life or End of Engineering plans for SLBrain?

Gellynck Jens [SLC] Selected answer as best 1st October 2021

1 Answer

1
2.02K 2 Comments

Hi Jens,

Yes you are correct. New correlation engine actions are handled completely separately.

At the moment we are still providing backwards compatibility with old style correlation rules, so there is no fixed plan to retire SLBrain yet as far as I know.

Simon Raine [SLC] [DevOps Enabler] Edited comment 1st October 2021
Gellynck Jens [SLC] commented

Thanks Simon! So in theory if I don’t use legacy correlation rules, I can disable the SLBrain service without interfering with my system?
Simon Raine [SLC] [DevOps Enabler] commented

In short no. It looks to me like SLBrain has not been fully decoupled from other processes yet. So I would advise against this.
You are viewing 1 out of 1 answers, click here to view all answers.