Greetings Daniel:

Add

overwrite="yes"

To the rule.

Then restart ossec

Thank you.

Reply via email to