Is there any documentation that specifies the log level/facility for the
devices types that are ingested into Security Analytics. Such as WinRM
and syslog
Hi everyone! We are currently working on some tuning in ESA alerts and
came across some MSG_ids that we cannot identifyThe two alerts are
listed below with associated message IDs that we need descriptions for -
Multiple Logs from MsgID Set with Same ...
These MsgIDs are actually built into an RSA rule below are the syntax.
We are trying to find out the description of the MsgID within the syntax
@Name('Module_esa000071_Alert')@Description('Multiple Logs from MsgID
Set with Same SourceIP and Destinati...
