Log file size reduced.
Description
Log file size reduced.
Query · wazuh
match="^ossec: File size reduced"
Fires when
Wazuh evaluates a chain top-down. Every rule above this one must match on the same event before this rule is tested at all.
-
decoded_as=ossec -
match="^ossec: File size reduced"
Rule dependencies
Depends on
-
composes · Wazuh if_sid
500