[ossec-list] parsing alerts log

[Meir Michanie]

I suggest using at least a semi xml notation for the alert logs.
Delimit each alert between "alert" tabs
<alert>
...
</alert>
This notation would help for error proof parsing