Re: [Prelude Hybrid IDS] #128: Prelude integration within SEC
Prelude Hybrid IDS <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#128: Prelude integration within SEC --------------------+------------------------------------------------------- Reporter: yoann | Owner: Chet Luther <[email protected]> Type: task | Status: new Priority: normal | Milestone: Component: sec | Version: Severity: normal | Resolution: Keywords: | --------------------+------------------------------------------------------- Comment (by grgomez): Robin, The analyzerid:messageid pair should point to a valid Prelude alert. There may be an error in the way the rule that generates this correlated event is put together, or Prewikka may not be able to find the matching event. Is there any reason why an event would not make its way into your Prelude database alongside these correlated alerts? Do you possibly have a prelude-manager filter for database commit? - Ramon -- Ticket URL: <https://trac.prelude-ids.org/ticket/128> Prelude Hybrid IDS <http://www.prelude-ids.org> The Prelude Hybrid Intrusion Detection System suite _______________________________________________ Prelude-devel site list [email protected] http://www.prelude-ids.org/mailman/listinfo/prelude-devel