elastalert icon indicating copy to clipboard operation
elastalert copied to clipboard
verified publisher icon Yelp

Correlation rule

Open praveens862 opened this issue 3 years ago • 2 comments

Hi , I am looking correlation rule like if from an blacklist IP ,I get accept connection on firewall and from same IP any activity detected on endpoint.

praveens862 avatar May 20 '22 12:05 praveens862

look https://github.com/Yelp/elastalert/issues/3178

nsano-rururu avatar May 20 '22 13:05 nsano-rururu

Hi @nsano-rururu I can't find this issue in 3178 can you suggest something else

praveens862 avatar May 20 '22 14:05 praveens862