Rules and connectors

Elastic Security SIEM
1

Hello,

I want to create an Alert to monitor a specific pattern error every 4 hours which occurs in the message field.

Could not connect to net.tcp: The connection attempt lasted for a time span of TCP error code 10061: No connection could be made because the target machine actively refused it .

The error I want to survey is "TCP error code 10061". Can someone help me?

Thank you.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.