Sagan low stable other

[SYSTEMD] Service Failed to Start

Detection Logic

alert any $EXTERNAL_NET any -> $HOME_NET any (msg: "[SYSTEMD] Service Failed to Start"; program: systemd; content: "Failed
| 20
| to
| 20
| start";after: track by_src, count 5, seconds 30; threshold: type suppress, track by_src, count 5, seconds 300; classtype: system-error; sid:5005973; rev:2;)

Field Validations

Loading…

Comments (0)

Loading comments...