hi all i have a confusion abt the event count value for the signatures.
say if i set the event count value to 5 then the signature will fire only if the event ocours 5 times right.
does it mean that when the first time the attack packet comes the signature is not fired and the action is not taken. the signature action is taken only if it hits 5 times.
is this what it means. and will the event be written to the event store.
can someone pls clarify this doubt.
regards
sebastan