Ginger-Headed comments

Repositories
Issues
Comments

Results 2 comments of


                                            Ginger-Headed

Index field is not filled in elasticksearch_detection_rule

Thanks for raising this. Took into work.

Splunk Mapping reverts to default source of WinEventLog regardless of RootA configuration

Hi! Log sources are defined by source and sourcetype field values. It is not based on an index name since the index name can be custom and not explicitly related...