One thing I noticed in kibana, the rule.groups goes down as far rootcheck, but not CIS.
rule.groups ossec, rootcheck Wait, I was just going to ask for an easier way to filter on CIS alerts. But then I found the CIS kibana dashboard. :-))) -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.