Maybe a sequence based correlation rule.
Can you please guide me the procedure how to monitor the service and create a rule for it. I also want to monitor a few services of our server once it's gets down we want to be alerted on this.
Kindly share the procedure or a weblink if any.
I'll see a sequence based correlation rule, thanks sssyyy!
Of course Fahad, I'll share my result here! :-)