Fix rule filenames for 3.12

wazuh · Mar 18, 2020 · 226f5a5 · 226f5a5
1 parent 93cb8b5
commit 226f5a5
Show file tree

Hide file tree

Showing 7 changed files with 7 additions and 0 deletions.
diff --git a/rules/0015-ossec_rules.xml b/rules/0015-ossec_rules.xml
@@ -228,6 +228,13 @@
     <group>syscheck,agentless,pci_dss_11.5,pci_dss_10.6.1,gpg13_4.11,gdpr_II_5.1.f,gdpr_IV_35.7.d,hipaa_164.312.c.1,hipaa_164.312.c.2,hipaa_164.312.b,nist_800_53_SI.7,nist_800_53_AU.6,</group>
   </rule>
 
+  <rule id="560" level="7">
+    <if_sid>500</if_sid>
+    <match>^ossec: Real-time inotify kernel queue is full.</match>
+    <description>FIM real-time queue is full. Some real-time events may be lost.</description>
+    <group>syscheck,agentless,pci_dss_11.5,pci_dss_10.6.1,gpg13_4.11,gdpr_II_5.1.f,gdpr_IV_35.7.d,hipaa_164.312.c.1,hipaa_164.312.c.2,hipaa_164.312.b,nist_800_53_SI.7,nist_800_53_AU.6,</group>
+  </rule>
+
   <!-- Hostinfo rules -->
   <rule id="580" level="8">
     <category>ossec</category>

diff --git a/rules/0630-mcafee_epo_rules.xml → rules/0625-mcafee_epo_rules.xml b/rules/0630-mcafee_epo_rules.xml → rules/0625-mcafee_epo_rules.xml
diff --git a/rules/0645-nextcloud_rules.xml → rules/0630-nextcloud_rules.xml b/rules/0645-nextcloud_rules.xml → rules/0630-nextcloud_rules.xml
diff --git a/rules/0650-owlh-zeek_rules.xml → rules/0635-owlh-zeek_rules.xml b/rules/0650-owlh-zeek_rules.xml → rules/0635-owlh-zeek_rules.xml
diff --git a/rules/0655-junos_rules.xml → rules/0640-junos_rules.xml b/rules/0655-junos_rules.xml → rules/0640-junos_rules.xml
diff --git a/rules/0635-panda-paps_rules.xml → rules/0675-panda-paps_rules.xml b/rules/0635-panda-paps_rules.xml → rules/0675-panda-paps_rules.xml
diff --git a/rules/0640-checkpoint-smart1_rules.xml → rules/0680-checkpoint-smart1_rules.xml b/rules/0640-checkpoint-smart1_rules.xml → rules/0680-checkpoint-smart1_rules.xml