Improve the algorithm which checks conditions

airbus-cyber / graylog-plugin-correlation-count

Alert condition plugin for Graylog to perform correlation

Other

24 stars 6 forks source link

Improve the algorithm which checks conditions #28

Open frantz45 opened 2 years ago

frantz45 commented 2 years ago

The actual algorithm is a double "for" loop to browse all events to check if conditions are satisfied at this specific timestamp. It consumes many resources, I think it could be improved.