Two variables are missing in the decoder documentation: https://documentation.wazuh.com/current/user-manual/ruleset/ruleset-xml-syntax/decoders.html
In particular, one is called plugin_decoder and the other one is use_own_name.
It has been also added a new one in wazuh/wazuh#677 that needs to be included when it is available in new versions of Wazuh.
Two variables are missing in the decoder documentation: https://documentation.wazuh.com/current/user-manual/ruleset/ruleset-xml-syntax/decoders.html
In particular, one is called
plugin_decoderand the other one isuse_own_name.It has been also added a new one in wazuh/wazuh#677 that needs to be included when it is available in new versions of Wazuh.