simple-evcorr-users@lists.sourceforge.net

3

replies

SEC_SHUTDOWN event/delay

started 2017-07-17 17:48:17 UTC

2017-07-17 23:12:56 UTC

Risto Vaarandi

5

replies

Sec Rule problem

started 2017-06-06 15:45:19 UTC

2017-07-04 13:54:57 UTC

Jaren Peich

0

replies

potential issues with mailing list

started 2017-06-15 02:13:14 UTC

2017-06-15 02:13:14 UTC

Risto Vaarandi

0

replies

integration with systemd (update to SEC FAQ)

started 2017-05-31 15:37:14 UTC

2017-05-31 15:37:14 UTC

Risto Vaarandi

2

replies

Regexp matching against context names

started 2017-04-20 14:51:20 UTC

2017-04-20 21:03:20 UTC

Dusan Sovic

2

replies

Sec error (invalid regular expression)

started 2017-04-15 02:13:46 UTC

2017-04-15 04:27:35 UTC

James Lay

3

replies

How to mail with a multiline body?

started 2017-03-29 02:09:13 UTC

2017-03-29 20:51:54 UTC

Risto Vaarandi

2

replies

Window being ignored

started 2017-03-27 23:15:39 UTC

2017-03-27 23:46:47 UTC

Yahoo

15

replies

Negation

started 2017-03-17 03:42:25 UTC

2017-03-17 23:17:14 UTC

James Lay

4

replies

VIM syntax file?

started 2017-02-10 04:16:28 UTC

2017-02-10 17:13:06 UTC

James Lay

0

replies

sec-2.7.11 released

started 2017-02-03 16:16:05 UTC

2017-02-03 16:16:05 UTC

Risto Vaarandi

3

replies

some changes in the next sec release (feedback appreciated)

started 2017-01-30 21:22:34 UTC

2017-01-31 21:44:22 UTC

Risto Vaarandi

2

replies

Test IF correlation operation exist then take action

started 2017-01-15 22:32:20 UTC

2017-01-16 13:12:09 UTC

Dusan Sovic

3

replies

Content of pattern match cache after synthetic event injection

started 2016-12-30 22:20:43 UTC

2017-01-01 19:32:54 UTC

Risto Vaarandi

2

replies

a very dumb issue

started 2016-12-29 01:30:03 UTC

2016-12-29 14:33:08 UTC

Risto Vaarandi

0

replies

Merry Christmas!

started 2016-12-25 01:55:53 UTC

2016-12-25 01:55:53 UTC

Jaren Peich

2

replies

Variable access lcall

started 2016-12-19 17:44:14 UTC

2016-12-23 17:58:58 UTC

Risto Vaarandi

1

reply

trying to create a rule to alarm when the i get one alarm and the cancelation didn´t arrive in 10 minutes

started 2016-12-23 17:57:06 UTC

2016-12-23 17:57:16 UTC

Risto Vaarandi

0

replies

problem sending events from rsyslog to sec

started 2016-12-22 20:41:53 UTC

2016-12-22 20:41:53 UTC

Martin Etcheverry

4

replies

From start specific file

started 2016-12-15 18:27:38 UTC

2016-12-15 23:40:52 UTC

Risto Vaarandi

4

replies

(no subject)

started 2016-11-30 19:47:33 UTC

2016-12-15 18:28:14 UTC

Jaren Peich

1

reply

unique login failures

started 2016-12-12 17:45:07 UTC

2016-12-12 19:31:33 UTC

Risto Vaarandi

1

reply

about to use sec to vcenter events

started 2016-11-22 21:48:07 UTC

2016-11-22 22:42:18 UTC

David Lang

4

replies

Auditd EXECVE message correlation

started 2016-11-19 02:53:45 UTC

2016-11-21 15:31:29 UTC

Nikolay Srebniuk

4

replies

EventGroup correlation issue with AUDITD messages

started 2016-11-16 20:22:12 UTC

2016-11-17 05:40:45 UTC

Risto Vaarandi

2

replies

trouble-shooting startup

started 2016-10-24 22:43:24 UTC

2016-10-26 00:18:12 UTC

Stuart Kendrick

10

replies

Read context

started 2016-09-30 14:20:28 UTC

2016-10-25 16:04:36 UTC

Jaren Peich

4

replies

How to handle multiple config files and input file pairs in sec resource file

started 2016-10-04 22:56:08 UTC

2016-10-05 04:01:54 UTC

Yahoo

6

replies

Rule Doubt

started 2016-08-19 12:39:38 UTC

2016-09-11 22:44:04 UTC

Risto Vaarandi

7

replies

Pairwithwindow rule

started 2016-09-09 00:30:39 UTC

2016-09-09 12:25:20 UTC

Risto Vaarandi