An error occurred during rule execution: message: "Current rule execution has exceeded its allotted interval (5m) and has been stopped

hai everyone , what should i do to fix this

An error occurred during rule execution: message: "Current rule execution has exceeded its allotted interval (5m) and has been stopped

Is the data needed to match the rule arriving in full? Did you evaluate the rule processing time, perhaps by observing the return of a request to elasticsearch? Are you using any integration with Wazuh or is the image from Wazuh's own graphical interface?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.