How to detect if a host has stopped sending logs to SSB
Message Rate Alerting can be configured so that an alert is sent if the number of logs being received from hosts by SSB either drops below or exceeds certain limits.
To configure message rate alerting
For more detailed information please see the section “Configuring message rate alerting” in the admin guide.
© ALL RIGHTS RESERVED. Feedback Conditions d’utilisation Confidentialité Cookie Preference Center