[Prelude Universal SIM system] #339: browse event at relying node
"Prelude Universal SIM system" <[email protected]> Mon, 15 Dec 2008 18:03:51 -0000
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#339: browse event at relying node
----------------------------------------------+-----------------------------
Reporter: rpvilao@… | Type: defect
Status: new | Priority: normal
Milestone: Prewikka 0.9.15 | Component: generic
Version: 0.9 | Severity: normal
Keywords: browse event relay relaying node |
----------------------------------------------+-----------------------------
Hi,
I've configure Prelude IDS with relaying support and I'm having some
problems on accessing the event at the relayed node, for instance I
generate an event on node1, with prewikka I can access to that
information, but when I try to access at the relayed node it throws this
error (see attach).
I'm defining the field in prelude-correlator like this:
ctx:set("alert.correlation_alert.alertident(>>).alertident",
INPUT:getraw("alert.messageid"))
Any help would be appreciated.
--
Rui
--
Ticket URL: <https://trac.prelude-ids.org/ticket/339>
Prelude Universal SIM system <http://www.prelude-ids.com>
Prelude Universal SIM system
_______________________________________________
Prelude-devel site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-devel