4
responses
responses
Fail to delete duplicate with pm_norepeat
Hello,
I'm trying to avoid having duplicate logs send to my OSSIM server. I tried using the pm_norepeat module but to no avail.
Here the line I added in nxlog.conf file :
<Processor sans_doublons>
Module pm_norepeat
</Processor>
<Route route_windows_logs>
Path in_windows_events => sans_doublons => out_alienvault_csv
</Route>