Re: [ossec-list] No Decoder Match Problem

On Fri, Jun 9, 2017 at 11:21 AM, Akash Munjal wrote: > > Hi, > > I create custom decoder, /var/ossec/etc/local_decoder.xml as: > > > myapplication > ^myapplication: > > > > Entry of decoder in manager ossec.conf file as: > > > local_rules.xml >

Re: [ossec-list] Updates rules and signatures

On Thu, Jun 8, 2017 at 2:01 PM, Alexis Lessard wrote: > Do you update the version every time you add new rules? We've manage to > install with with yum using atomicorp repo's, so if you could update them > with yum, that'd much easier. > Atomic may update the rules

Re: [ossec-list] How ossec manager reads decoder

On Thu, Jun 8, 2017 at 12:12 PM, Akash Munjal wrote: > HI, > > How ossec manager reads decoder...? > Can you expand on this question? It doesn't make much sense. > Thanks.. > > -- > > --- > You received this message because you are subscribed to the Google Groups >