airbus-cyber / graylog-plugin-alert-wizard

Alert Wizard plugin for Graylog to manage the alert rules
Other
45 stars 7 forks source link

We can't set a backlog value for a specific rule #41

Open frantz45 opened 3 years ago

frantz45 commented 3 years ago

At the moment we can only set a generic backlog value in the Wizard's settings for all new rules. It could be nice to be able to set a backlog value for a specific rule. You could add this option at the API level so we could play with it in the JSON. In my opinion adding a graphical option in the Wizard interface is not necessary.