4
responses

Fail to delete duplicate with pm_norepeat

Hello,

I'm trying to avoid having duplicate logs send to my OSSIM server. I tried using the pm_norepeat module but to no avail.
Here the line I added in nxlog.conf file :

<Processor sans_doublons>
Module pm_norepeat
</Processor>

<Route route_windows_logs>
Path in_windows_events => sans_doublons => out_alienvault_csv
</Route>

AskedJuly 17, 2018 - 10:48am