[NXLOG] Missing Windows Log Message

alert any $EXTERNAL_NET any -> $HOME_NET any (msg: "[NXLOG] Missing Windows Log Message"; pcre: "/ [0-9][0-9][0-9][0-9]?: $/"; program: *Security*
| AppLocker
| Application
| Backup
| Bonjour
| CPQCISSE
| Citrix
| DAC
| DHCP-Server
| EMET
| Eventlog
| MSSQL*
| MsiInstaller
| NtFrs
| Ntfs
| RemoteAccess
| Service
| Service_Control_Manager
| Symantec
| Sysmon
| System
| USER32
| Tenable
| TermService
| The
| WinVNC4
| crypt32; after: track by_src, count 30, seconds 300; threshold: type suppress, track by_src, count 1, seconds 86400; flexbits: set,nxlog_problem,86400; classtype: program-error; sid:5003111; rev:7;)