You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The latest release of pySigma includes a feature known as Sigma Correlations (documented in the next version of the Sigma specification), which allows Sigma rules to look at a larger number of log events and use them to determine whether to produce an alert or not.
We should be able to achieve most (if not all) of the core Correlations functionality via LogQL's metric queries support.
The text was updated successfully, but these errors were encountered:
kelnage
changed the title
Update plugin to support pySigma v0.11.0 and Sigma Correlations
Update backend to support pySigma v0.11.0 and Sigma Correlations
Jan 5, 2024
The latest release of pySigma includes a feature known as Sigma Correlations (documented in the next version of the Sigma specification), which allows Sigma rules to look at a larger number of log events and use them to determine whether to produce an alert or not.
We should be able to achieve most (if not all) of the core Correlations functionality via LogQL's metric queries support.
The text was updated successfully, but these errors were encountered: