What do you mean by exception? Do you want to ignore the alert?
Xen On Aug 17, 4:27 am, Rafael Gomes <[email protected]> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I don't know how I can do this, I wanna create a exception with tag match. > > I tried this way: > > <match>!prash in log that I don't wanna get in ossec anymore</match> > > but don't works. > > any tips? > > - -- > Rafael Brito Gomes > Analista de Segurança > LPIC-1 > DISUP/CPD/UFBA > Tel : +55 71 3283 6102 > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.9 (GNU/Linux) > Comment: Using GnuPG with Mozilla -http://enigmail.mozdev.org > > iEYEARECAAYFAkqJPpcACgkQmcKAeZZwz2b1VgCaAvoxl8oFYnfiHncqfdWAeTou > 1J4An2iXNSUQuaB5PYq8x4N7orXQQh3l > =C3yT > -----END PGP SIGNATURE-----
