03/28/2019

11:36 AM PRELUDE SIEM User: RE: [prelude-correlator] preludecorrelator context resets timer (expire) for each match

Workaround:...

10:15 AM PRELUDE SIEM Devel: [prelude-correlator] alert is not triggered when receiving continuous logs in a context

Hello,
The detected issue is described at
https://www.prelude-siem.org/boards/1/topics/218.
To sum up, it se...

10:11 AM PRELUDE SIEM User: RE: [prelude-correlator] preludecorrelator context resets timer (expire) for each match

I think that the reset is taking place at the search function, due to the update=True...

03/27/2019

12:43 PM PRELUDE SIEM User: [prelude-correlator] preludecorrelator context resets timer (expire) for each match

Hello,
I noticed that the context class of preludecorrelator package resets the timer every time that a match is ...

03/01/2019

11:25 AM PRELUDE SIEM User: RE: [prelude-manager] Is there any way to write on a file only alerts coming from prelude-c...

Thank you very much Antoine. It works!

02/28/2019

03:14 PM PRELUDE SIEM User: [prelude-manager] Is there any way to write on a file only alerts coming from prelude-corre...

Hello,
I have a prelude infrastrcture with a prelude-manager, a prelude-correlator and multiple sensors that sends...

02/11/2019

01:05 PM PRELUDE SIEM User: RE: [Wazuh not sending alerts to prelude-manager]

Solved!
It is fault of a wazuh source code error. I did a workaround and it is correctly sending the events to pre...

08:46 AM PRELUDE SIEM User: RE: [Libprelude] Specify a distinct path installation

Hello Antoine,
The output is...

02/08/2019

10:18 AM PRELUDE SIEM User: [Libprelude] Specify a distinct path installation

Hello,
I want to install Libprelude in a different path, for example at /etc/, to do so, before installing it, at ...

02/07/2019

02:55 PM PRELUDE SIEM User: RE: [Wazuh not sending alerts to prelude-manager]

Antoine LUONG wrote:
> Hello,
>
> Please check the logs of the OSSEC sensor to see if the Prelude client starts c...