Andre, You can run AR by rule ID, by rule group, or by alert level. Keep in mind, if you trigger by alert level, it triggers for ALL rules of that level or higher.
- Dave To unsubscribe from this group, send email to ossec-list+unsubscribegooglegroups.com or reply to this email with the words "REMOVE ME" as the subject.
