[ossec-list] Re: Ignore an alert for first 10 minutes of environment build

2016-06-16 Thread Tahir Hafiz
Cheers! On Thursday, 16 June 2016 08:47:42 UTC+1, Jesus Linares wrote: > > Hi Tahir, > > I think there is no official way to do that. You could change the netstat > command to show some special string when it is an initial environment and > then if the output has that string, ignore it (using

[ossec-list] Re: Ignore an alert for first 10 minutes of environment build

2016-06-16 Thread Jesus Linares
Hi Tahir, I think there is no official way to do that. You could change the netstat command to show some special string when it is an initial environment and then if the output has that string, ignore it (using the proper alert). I hope it helps. Regards. On Monday, June 13, 2016 at 3:26:42