On Sun, Jul 10, 2011 at 4:26 PM, Jason Frisvold <[email protected]> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On Jul 9, 2011, at 1:28 PM, jplee3 wrote: >> Turns out that you need to have it set to be logged, so level 1 or >> higher otherwise the if_matched_sid frequency will never fire - seems >> like it's depending on the alert being logged in order to properly >> function. > > That would make sense. Perhaps we can make the documentation clearer on this > point? >
Working on it. :) > - --------------------------- > Jason 'XenoPhage' Frisvold > [email protected] > - --------------------------- > "Any sufficiently advanced magic is indistinguishable from technology." > - - Niven's Inverse of Clarke's Third Law > > > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG/MacGPG2 v2.0.16 (Darwin) > > iEYEARECAAYFAk4aCwgACgkQ8CjzPZyTUTQWLACgoD02Xo0H7nqnfeTJPhsPa+Io > ljIAnjqaANzG5zUD+lzPk85NIS1+gx1H > =kcp5 > -----END PGP SIGNATURE----- >
