Excellent! That tool did indeed show me the situation and solution. Thank you very much.
Daniel Cid wrote: > Hi Amos, > > I would recommend that you look at the logtest tool to debug your decoders > and rules. We have more information about it at: > > http://www.ossec.net/dcid/?p=136 > > If you run your logs through this tool, it will give you lots of > information of what is going on..
