Skip to content

Settings and Environment Variables

These variables are read by modules under SIEMatic/settings/. Boolean values accept 1, true, yes, or on (case-insensitive); other values are false.

Variable Default Purpose
DATABASE_ENGINE django.db.backends.sqlite3 Django database backend. Compose uses PostgreSQL.
DATABASE_HOST empty Database server hostname.
DATABASE_NAME db.sqlite3 Database name or SQLite file path.
DATABASE_PASSWORD empty Database user's password.
DATABASE_PORT empty Database server port.
DATABASE_USER empty Database username.
DEFAULT_FROM_EMAIL siematic@example.com Sender address for application email.
DJANGO_ALLOWED_HOSTS role-specific local hosts Comma-separated hostnames accepted by Django.
DJANGO_DEBUG False Enables Django debug mode. Never enable in production.
DJANGO_LOG_LEVEL INFO Python and Django logging level.
DJANGO_SECRET_KEY none (required) Django signing secret; startup fails when absent or left at the placeholder.
EMAIL_BACKEND file-based backend Django email backend import path.
EMAIL_HOST localhost SMTP server hostname.
EMAIL_HOST_PASSWORD empty SMTP password.
EMAIL_HOST_USER empty SMTP username.
EMAIL_PORT 25 SMTP server port.
EMAIL_USE_SSL False Connect to SMTP with implicit TLS. Mutually exclusive with EMAIL_USE_TLS.
EMAIL_USE_TLS False Upgrade the SMTP connection with STARTTLS. Mutually exclusive with EMAIL_USE_SSL.
INDEXER_CA_BUNDLE empty CA certificate bundle used by agents to verify the indexer.
INDEXER_HOSTNAME localhost Indexer hostname used by agent and indexer role settings.
INDEXER_MODE unset Selects the indexer's minimal URL configuration and disables the debug toolbar.
INDEXER_PASSWORD none Password used by an agent to authenticate to the indexer.
INDEXER_PORT 8000 Indexer port; Compose normally overrides this.
INDEXER_SSL_CERT empty Indexer TLS certificate path.
INDEXER_SSL_KEY empty Indexer TLS private-key path.
INDEXER_TLS value of SIEMATIC_TLS_ENABLED Enables TLS for agent-to-indexer transport.
INDEXER_USERNAME none Username used by an agent to authenticate to the indexer.
SIEMATIC_AGENT_SYSMON_ONLY False Deprecated alias for SIEMATIC_AGENT_CORE_ONLY.
SIEMATIC_AGENT_CORE_ONLY False Uses the cross-platform Sysmon, network-security, and host-security-posture plugins instead of platform defaults.
SIEMATIC_ANON_THROTTLE_RATE 20/hour DRF anonymous request throttle rate.
SIEMATIC_INGEST_THROTTLE_RATE 20000/hour DRF event-ingestion throttle rate.
SIEMATIC_SEARCH_THROTTLE_RATE 120/min DRF search throttle rate.
SIEMATIC_TLS_ENABLED False Enables HTTPS-oriented cookie, redirect, and HSTS settings.

Python settings

SIEMATIC_SEARCH["SUMMARY_DATE_FORMATS"] is an ordered list of Python strptime formats used to identify date columns in search-result summaries. Its defaults are %Y-%m-%d, %Y-%m-%d %H:%M:%S, %m/%d/%Y, and %d/%m/%Y. Add or replace entries in the Django settings module when result data uses a different date representation.