Payload lenght error

[Intrudr-Sec]

Hi,

I run the script and when i import the xml file, i get this error :

Payload content length greater than maximum allowed: 1048576

If i split the sigma.xml file, i can import in wazuh manager.

I run the script on my local computer then import to wazuh.

thanks

[Intrudr-Sec]

well... the wazuh manager don't like this, even if i copy the file on the server and move to the rules folder.
The file is way to large, can we split in file per rules ?

[Intrudr-Sec]

i try only the first 1k lines, the file size is around 46kb, so if we split with some logic, this could work
I let you check