You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Wazuh | Mailing List
Hello, can u clarify some strange things with rule 61102. When i get csv file with all events (data.win.system.eventID:
Descending; rule.level: Descending; rule.description: Descending; rule.id: Descending; Count), i found that standard rule 61102 have dublicate. I understand that this rule haven't event id, but why generate so much IDs?