Update query in provision_wazuh_monitoring_alert function
Taylor committed
Feb 15, 2024 at 10:16 UTC
c7ee35057011d486f2e78aa3bfb7f034c239eadf
1 file changed
+1
-1
backend/app/integrations/monitoring_alert/services/provision.py
+1
-1
@@ -301,7 +301,7 @@ async def provision_wazuh_monitoring_alert(
301
priority=2,
302
config=GraylogAlertProvisionConfig(
303
type="aggregation-v1",
304
- query="syslog_level:ALERT AND syslog_type:wazuh",
304
+ query="syslog_level:ALERT AND syslog_type:wazuh AND NOT (rule_group1:office365 OR rule_group1:vulnerability-detector)",
305
query_parameters=[],
306
streams=[],
307
group_by=[],