5.3.1 Starting Behavior Detection Jobs

The OFSBD administrator starts jobs by running the start_mantas.sh script.

To start a new job in OFSBD, follow these steps:

1. Create the new job and job description through an OFSBD Job Editor in the Scenario Manager.
   OFSBD automatically assigns a unique ID to the job when it is created.
2. Associate the new job to a Job Template Group using the KDD_JOB_TEMPLATE table. Refer to Understanding the OFSBD Job Protocol.
3. Execute the start_mantas.sh script as follows: start_mantas.sh <template id>
   The following events occur automatically:
   1. The job goes into the job queue.
   2. The dispatcher starts the job in turn, invoking the MANTAS process and passing the job ID and the thread count to the MANTAS process.
   3. The MANTAS process creates the run entries in the OFSBD metadata tables. Each job consists of one or more runs.
   4. The MANTAS process handles the job runs.
   After a job runs successfully in OFSBD, you can no longer copy, edit, or delete the job. The start_mantas.sh script waits for all jobs in the template group to complete.