From 3225f8487498fb8e115597ae2fe3787629b6e9ff Mon Sep 17 00:00:00 2001
From: taylor_socfortress <111797488+taylorwalton@users.noreply.github.com>
Date: Thu, 3 Jul 2025 10:32:25 -0500
Subject: [PATCH] Update 900000-exclusion_rules.xml

---
 Exclusion Rules/900000-exclusion_rules.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Exclusion Rules/900000-exclusion_rules.xml b/Exclusion Rules/900000-exclusion_rules.xml
index ecb4c04..847f5a1 100644
--- a/Exclusion Rules/900000-exclusion_rules.xml	
+++ b/Exclusion Rules/900000-exclusion_rules.xml	
@@ -838,8 +838,8 @@
   <!-- Exclude Graylog Java Process for Tetragon -->
   <rule id="900117" level="1">
     <if_sid>700002</if_sid>
-    <field name="process.kprobe.process.binary" type="pcre2">^\/usr\/share\/graylog-server\/jvm\/bin\/java$</field>
-    <description>Exclude ossec</description>
+    <field name="process_kprobe.process.binary" type="pcre2">^\/usr\/share\/graylog\-server\/jvm\/bin\/java$</field>
+    <description>Exclude Graylog Java</description>
     <options>no_full_log</options>
   </rule>
   <!-- Exclude Ossec Process -->