• Support
  • Forums
  • Blogs

Event Name shows "directive_alert: Unknown event"

tskengtskeng

Hi,

Event Name shows "directive_alert: Unknown event" when looking at Security Events (SIEM) - OSSIM 5.4.0.

unknown_event

In grouped event view, there are separate entries to indicate that each of them are unique but yet still shows "directive_alert: Unknown event".


unknown_event_1

Any idea why?

Share post:

Answers

  • hi tskeng,

    same here as well. After I look into the event, the real event shows up and then the table gets updated.
    But only for this event i have to go thru every event.

    I have version 5.4.1  

     
  • me too, however o a restart in defaults back to unknown event again
Sign In or Register to comment.