Thanks for your reply. But how can I modify a rule provided out of the box by Ossec through my local rule file ?
- [ossec-list] Alert only after x fired rules ? Vianney Lejeune
- [ossec-list] Re: Alert only after x fired rules ? ddp
- [ossec-list] Re: Alert only after x fired rules ? Vianney Lejeune
