I've developed two custom patterns to fetch software running on Linux servers with two versions: autosys_dev and autosys_prod. The problem is that the running processes for these two software versions share the same attributes, such as cybagent.bin name, parameter -a, command line -a, and many with an empty listening port.
To address this, I created two process classifiers for the two probes. However, since the attributes are the same, one pattern is triggering two times and creating a duplicate.
How can I address this issue?
