F5 BigIP GTM - new Decoders and Rules

[jmmallorq]

Hello,

I created new Decoders and Rules for F5 Big-IP GTM (Global Traffic Manager) devices.

For the Rules, I used <field name="level"> conditions to generate the corresponding alerts. I assigned IDs from 64260 to 64263.

The script output doesn't show any "Failed" message:

# ./runtest.py
- [ File = ./tests/f5_bigip.ini ] ---------
........

I upload the following files:

• decoders/0099-f5_bigip_decoders.xml
• rules/0690-f5_bigip_rules.xml
• tools/rules-testing/f5_bigip.ini

Regards,
J. M. Mallorquín

[juanrricci]

Hello team, we close this PR without applying changes in the current repository. However, they were applied with minimal changes (addressing compatibility with the whole ruleset) in the Wazuh last version repository under the following PR: wazuh/wazuh#7289.