The two images below show how the field-index mapping config relates to Sigma rules and the Elastalert rule format (the result).
確定! 回上一頁