Hello,
| It appears to me that OSSEC's might not be getting the
| assessment.impact.completion
| part of the IDMEF path correct.
|
[...]
|
| In fact, it seems to set completion = succeeded on all of it's IDMEF
| alerts.
|
| Is this a bug? Or is prelude support/integration not quite finished?
|
|
To clear things out, the Prelude support is finished.
However, you spotted a bug. If you open a ticket on the Prelude trac
(http://trac.prelude-ids.org) an assign the work to me (toady), I will have a
look at it and not forget it.
Thank you for reporting this,
Sebastien.
