You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to ossec-list
Hi all,
My custom rule id is 530 when it stops triggering the alert, a new rule id 531 wants to trigger. I already have written both rules but my requirement is to get an only single alert in between again rule id 530 if the trigger
Jonathan Martín Valera
unread,
Aug 21, 2020, 3:03:39 AM8/21/20
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to ossec-list
Hi super man,
Do you want to trigger an alert just when another is triggered, and that it only activates once a given time interval?
So far what you've managed to do is generate a second alert every time another one is generated?
Could you share these two rules to see if we can help you?