graylog-plugin-correlation-count
graylog-plugin-correlation-count copied to clipboard
Published
20 hours ago •
airbus-cyber
airbus-cyber
Alert condition plugin for Graylog to perform correlation
Results
3
graylog-plugin-correlation-count issues
Sort by
recently updated
recently updated
newest added
Events from stream1 should occured **strictly** before/after those from stream2. If they happen at exactly the same time (milisecond) it will not trigger an Event. It should be documented in...
Actually the plugin has 2 threshold types (more/less than), 2 streams and multiple time conditions (any/before/after). It makes the code complex. Regarding the time conditions we could only keep before...
The actual algorithm is a double "for" loop to browse all events to check if conditions are satisfied at this specific timestamp. It consumes many resources, I think it could...
enhancement
Metadata
22
Stars
6
Forks
Watchers
Owner
Metadata
Alert condition plugin for Graylog to perform correlation