Thanks for the explanation, btw u are using syslog right? and how to create alert and what kind of field usually triggered or considered as a threat on syslog?

You create really great content. 👍👍

Thank you

thank you keep going