mirror of
https://github.com/socfortress/Wazuh-Rules.git
synced 2025-10-23 08:12:16 +00:00
12 lines
481 B
XML
12 lines
481 B
XML
<!--
|
|
- 2023/08/21 20:42:46 wazuh-authd: WARNING: Duplicate name 'SOCFortress-Test', rejecting enrollment. Agent '027' key already exists on the manager.
|
|
-->
|
|
<decoder name="wazuh-authd">
|
|
<prematch>wazuh-authd:</prematch>
|
|
</decoder>
|
|
<decoder name="wazuh-authd-duplicate">
|
|
<parent>wazuh-authd</parent>
|
|
<regex>WARNING: Duplicate name '(\S+)', rejecting enrollment\. Agent '(\d+)' key already exists on the manager\.</regex>
|
|
<order>duplicate_name, agent_id</order>
|
|
</decoder>
|