Skip to content
Snippets Groups Projects
Commit 40821f7e authored by Zitnik, Anze's avatar Zitnik, Anze
Browse files

Merge branch 'elasticsearch-query-update' into 'master'

Corrected elasticsearch rule.description query

See merge request medina/evidence-collector!5
parents a0b4d6d5 3aa96646
No related branches found
No related tags found
No related merge requests found
......@@ -90,7 +90,7 @@ class Checker:
def check_clamd_logs_elastic(self, agent):
s = Search(using=self.es, index="wazuh-alerts-*") \
.query("match", predecoder__program_name="clamd") \
.query("match", rule__descrhosttion="Clamd restarted") \
.query("match", rule__description="Clamd restarted") \
.query("match", agent__id=agent[0])
body = s.execute().to_dict()
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment