Hi Marty,

Great idea and initiative. I hope to see some great suggestions and documents
showing up in the wiki as a result of that :) Some topics that are constantly
asked in the list (or to me personally):

-How to add more log files to be monitored?
-How to execute a pre-compiled (binary) install of ossec?
-How to write a new rule/decoder (simple, complex, correlation, etc)?

Thanks,

--
Daniel B. Cid
dcid ( at ) ossec.net


On 9/18/06, Marty E. Hillman <[EMAIL PROTECTED]> wrote:




Unless Daniel slaps my hand for usurping his authority ;-),  I would like to
invite people to compile a list of help topics that they would like to see
explained in the wiki.  Many of us muddle our way through the configuration
issues and find best practices for getting the software to work the way we
want.  Many times, it is a recurring issue that should be answered in the
FAQ.  We should adequately document the processes so that we can free Daniel
to have more development time.  It will also keep us from providing the same
answers repeatedly as new people discover the software.  Hopefully we can do
that to make configuration easier for everybody.



I am willing to contribute as much time as I can to documenting things I
know about (admittedly that is not much).  But I am not afraid to learn
either, so if you want to throw me your ideas, I will do my best to provide
easy to understand answers.  I know that there are others out there willing
to do the same and I encourage them to do so.



Thoughts?  Ideas?  Suggestions?





This electronic mail (including any attachments) may contain information
that is privileged, confidential, and/or otherwise protected from disclosure
to anyone other than its intended recipient(s). Any dissemination or use of
this electronic email or its contents (including any attachments) by persons
other than the intended recipient(s) is strictly prohibited. If you have
received this message in error, please notify us immediately by reply email
so that we may correct our internal records. Please then delete the original
message (including any attachments) in its entirety. Thank you.

Reply via email to