Events with local timezone field #23837
Unanswered
carsiverios
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Good afternoon,
I am doing a cybersecurity project and I have a question regarding local time.
I would like to be able to detect logins from RDP and SSH at night. The problem lies in the fact that I have a test lab where I have a few machines in different timezones (this is a must, I can't change it) and all of them connected to the same Wazuh server.
Is there any way to get in all the events the Wazuh agent forward to the server a field to store the local time and be able to use it in the rules logic?
Thanks in advance,
Best regards,
Beta Was this translation helpful? Give feedback.
All reactions