I have a question for the group.
With SecMon 2.0.2, you can apply an event filter by using the filter editor for a specific signature id to be included in the console view. Is there a way to have the event console exclude multiply signatures of choice but display all the rest when opening the event console with <last saved> event filter. In other words, what I would like is to be able to “open the console” but exclude the sig_id for example nachi (2156)
