Merge branch '7.9' into main
This commit is contained in:
@@ -17,6 +17,7 @@ false_positives = [
|
||||
by ordinary users is uncommon. These can be exempted by process name or username.
|
||||
""",
|
||||
]
|
||||
from = "now-9m"
|
||||
index = ["auditbeat-*", "logs-endpoint.events.*"]
|
||||
language = "kuery"
|
||||
license = "Elastic License"
|
||||
|
||||
Reference in New Issue
Block a user