On Thu, Mar 1, 2012 at 3:13 PM, Viktor Gazdag <[email protected]> wrote: > Hi! > > It depends on what the some info is! > " " "" "" "" "" "" "" "" "" "" "\w+\s\w+" > " " "" "" "" "" "" "" "" "" "" "some info" > If it ie.: " " "" "" "" "" "" "" "" "" "" "some info to extract", then it > won't work! Read about ossec regex and decoder writeing tutorials and ask if > you don't understand something! >
Many thanks Viktor ... I have found a work solution.
