ID: yh8638ak2
Type: Sequence
Children:
- ID: jw3xoxpxr
  ParentID: yh8638ak2
  Type: Filter
  Variables:
  - Name: Host_IP
    Expression: event["Host.IP.0"]
  - Name: User_Name
    Expression: event["Scanner.Auth.Login"]
  Filter: ETECS.Сканер-ВС 6.Создан новый пользователь
  Forking: true
