Yelp/elastalert

Correlation rule

praveens862 opened this issue · 2 comments

Hi , I am looking correlation rule like if from an blacklist IP ,I get accept connection on firewall and from same IP any activity detected on endpoint.

Hi @nsano-rururu I can't find this issue in 3178 can you suggest something else