How to pull stats/reports for rules (based on frequency, detectors attached to a rule)

Plugins Security Analytics
1

Hi,

What are the best practices for getting stats (via discover, visualize, etc) for rules based on the following criteria:

  1. Get rule stats/reports based on its frequency/time is triggered over a period of time.
  2. Get rule stats/reports based on which detector it is attached to. Can this be done as well for multiple rules?
2

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.