Copy them to local_rules and use overwrite="yes": <rule id="5706" level="12" overwrite="yes"> ...
On Thu, Jun 9, 2011 at 2:58 PM, frankstefan <[email protected]> wrote: > Hi. > > I want to edit the alert-level for Multiple failed sshd-logins. Do I > edit sshd_rules.xml or cut and paste it to local_rules.xml in order > to not overwrite it the next time i update?
