diff --git a/Duo/200930-duo.xml b/Duo/200930-duo.xml
new file mode 100644
index 0000000..3565722
--- /dev/null
+++ b/Duo/200930-duo.xml
@@ -0,0 +1,9 @@
+<group name="duo,">
+ <rule id="200930" level="3">
+    <if_sid>100002</if_sid>
+    <location>duo_auth_logs</location>
+    <description>DUO Authentication Logs</description>
+    <options>no_full_log</options>
+    <group>auth,</group>
+  </rule>
+</group>