Idmef-Criteria Prelude Filter heartbeat
Alvaro Luis Quispe R. <[email protected]> Mon, 4 Aug 2008 20:42:47 +0000
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
Good Morning; I have a question; Which is the rule in the filter [Idmef-Criteria] for filter the heartbeats?? this,because i have the following filter: [idmef-criteria] rule = alert.assessment.impact.severity == high hook = db And the Agents Status is offline! Best Regards, Álvaro _________________________________________________________________ ¡Lo mejor de MSN y Windows Live en tu móvil! Hotmail, Messenger, Spaces… Pruébalo ya y disfruta de todas sus ventajas donde quieras http://serviciosmoviles.es.msn.com/ _______________________________________________ Prelude-devel site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-devel