[ossec-list] Re: Filter Windows Event Log at client

I used *or* and it worked. Thanks very much! -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options,

[ossec-list] Re: Filter Windows Event Log at client

I used *or* and it worked. Thanks very much! Vào 17:57:11 UTC+7 Thứ Ba, ngày 29 tháng 3 năm 2016, Jesus Linares đã viết: > > Hi, > > try with *and*/*or*: > > > Security > eventchannel > Event/System[EventID=5140 and EventID=5144] > > > Regards, > Jesus Linares. > > On Monday, March 28,

[ossec-list] Re: Filter Windows Event Log at client

Hi, try with *and*/*or*: Security eventchannel Event/System[EventID=5140 and EventID=5144] Regards, Jesus Linares. On Monday, March 28, 2016 at 10:58:57 AM UTC+2, Duẩn Phạm wrote: > > Hi, > > I have installed the new version of OSSEC v2.8.3. I have a windows ossec > client. I would