Andy, I hope you don't mind if I ask a question regarding getting CDB list lookups to work as you seem to have it set up correctly.
I'm a bit confused about the file names used in the example at http://www.ossec.net/doc/manual/rules-decoders/rule-lists.html. It states that the file <rules/cdb_record_file> will be used for the lookup but puts <rules/records> in the list XML. I've tried with both and it doesn't seem to work. Could you share your config as an example please? Thanks. Bob
