On Mon, Aug 13, 2012 at 9:55 AM, Nelson, James <[email protected]> wrote: > How would I write a custom rule to set the level of certain rules to 0 > during a specific time of day. For example, I want to ignore logins on a > machine during office hours. > > > > Thanks
You could try http://www.ossec.net/doc/syntax/head_rules.html#element-time
