Hello,
I dont know why my processor is not working.This is my processor:
processors:
- drop_event.when.not.or:
- equals.winlog.event_id: 4608
- equals.winlog.event_id: 4609
- equals.winlog.event_id: 4624
- equals.winlog.event_id: 4625
- equals.winlog.event_id: 4697
- equals.winlog.event_id: 4620
- equals.winlog.event_id: 4722
- equals.winlog.event_id: 4723
- equals.winlog.event_id: 4724
- equals.winlog.event_id: 4800
- equals.winlog.event_id: 4801
- equals.winlog.event_id: 4802
- equals.winlog.event_id: 4803
- equals.winlog.event_id: 11707
- equals.winlog.event_id: 11724
- equals.winlog.event_id: 592
This is not working anymore in this version and i dont know to fix it.
Thank you