dsiem icon indicating copy to clipboard operation
dsiem copied to clipboard

Published 20 hours ago • verified publisher icon defenxor

It's not rule

Open Atanon opened this issue 3 years ago • 1 comments

Hello,

Can we create the rule not within the Plugin_Sid values? (example !SRC_IP or !Custom_Data1)

Our goal is to generate an alarm if a user connecting with vpn does not connect to a server within 10 minutes. So is it possible to generate an alarm in case of a non-existent event?

Atanon avatar Jun 13 '21 14:06 Atanon

SridarSri avatar Nov 23 '21 09:11 SridarSri