Search results

Error with variables for alert_time keyword

Status: Open.

#171 In beave/sagan;

· Vernaculus opened on Apr 19, 2022

THIS REPO HAS MOVED TO https://github.com/quadrantsec/sagan !

Status: Open.

#170 In beave/sagan;

· beave opened on Jan 7, 2021

Document purpose of "hostname" field

Status: Open.

#147 In beave/sagan;

· candlerb opened on Oct 29, 2019

Documentation/purpose of "date" and "time" fields

Status: Open.

#144 In beave/sagan;

· candlerb opened on Oct 29, 2019

Output Options / FIFO

Status: Open.

#129 In beave/sagan;

· SpudDogg opened on Aug 13, 2019

Sagan - stats issue.

Status: Open.

#127 In beave/sagan;

· beave opened on Jul 10, 2019

Write "stats" out to json

Status: Open.

#126 In beave/sagan;

· beave opened on Mar 20, 2019

Sagan faults with large input and certain pcre rules.

Status: Open.

#122 In beave/sagan;

· beave opened on Aug 21, 2018

Alert on rulesets that don't match source logs or have 0 hits after X time.

Status: Open.

#117 In beave/sagan;

· Brian-Echeverry opened on Jun 6, 2018

Client tracking via a specified list

Status: Open.

#116 In beave/sagan;

· beave opened on Jun 5, 2018

xbit to track usernames.

Status: Open.

#115 In beave/sagan;

· beave opened on May 25, 2018

With Bluedot disabled, you can still load bluedot rules

Status: Open.

#112 In beave/sagan;

· beave opened on May 18, 2018