[Prelude Universal SIM system] #339: browse event at relying node

"Prelude Universal SIM system" <[email protected]> Mon, 15 Dec 2008 18:03:51 -0000
Newsgroups gmane.comp.security.ids.prelude.devel
Message-ID <[email protected]>
#339: browse event at relying node
----------------------------------------------+-----------------------------
 Reporter:  rpvilao@…                         |        Type:  defect 
   Status:  new                               |    Priority:  normal 
Milestone:  Prewikka 0.9.15                   |   Component:  generic
  Version:  0.9                               |    Severity:  normal 
 Keywords:  browse event relay relaying node  |  
----------------------------------------------+-----------------------------
 Hi,

 I've configure Prelude IDS with relaying support and I'm having some
 problems on accessing the event at the relayed node, for instance I
 generate an event on node1, with prewikka I can access to that
 information, but when I try to access at the relayed node it throws this
 error (see attach).

 I'm defining the field in prelude-correlator like this:

 ctx:set("alert.correlation_alert.alertident(>>).alertident",
 INPUT:getraw("alert.messageid"))

 Any help would be appreciated.

 --
 Rui

-- 
Ticket URL: <https://trac.prelude-ids.org/ticket/339>
Prelude Universal SIM system <http://www.prelude-ids.com>
Prelude Universal SIM system
_______________________________________________
Prelude-devel site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-devel