[ossec-list] Re: User defined rules

[Meir Michanie]

I would encourage you to follow the howto:

http://www.ossec.net/wiki/index.php/Monolitic_rules_file