Update datafeed_auth_high_count_logon_events_for_a_source_ip.json

formatting
elastic · May 16, 2022 · 988c7f0 · 988c7f0
1 parent b265aa4
commit 988c7f0
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/...nizer/modules/security_auth/ml/datafeed_auth_high_count_logon_events_for_a_source_ip.json b/...nizer/modules/security_auth/ml/datafeed_auth_high_count_logon_events_for_a_source_ip.json
@@ -12,6 +12,7 @@
                     "should": [
                     {"term": {"event.category": "authentication"}},
                     {"term": {"event.outcome": "success"}}
+                    ]
                 }}
             ]
         }