Rafael Gomes wrote: > I don't know how I can do this, I wanna create a exception with tag match. > > I tried this way: > > <match>!prash in log that I don't wanna get in ossec anymore</match> > > but don't works. > > any tips?
Please post the full log you are trying to ignore along with the full rule you created that isn't working.
