Update rules/cross-platform/reconnaissance_web_server_unusual_spike_in_error_logs.toml

Aegrah · web-flow · commit 600a47dc3407 · 2025-11-21T15:29:53.000+01:00
diff --git a/rules/cross-platform/reconnaissance_web_server_unusual_spike_in_error_logs.toml b/rules/cross-platform/reconnaissance_web_server_unusual_spike_in_error_logs.toml
@@ -38,7 +38,7 @@ type = "esql"
 query = '''
 from
   logs-nginx.error-*,
-  logs-apache.error-*,
+  logs-apache_tomcat.error-*,
   logs-apache.error-*,
   logs-iis.error-*
 | where
