[ossec-list] Multiple groups in syslog output

[C. L. Martinez]

Hi all,

 What is the correct option to define multiple groups in syslog_output section??

a)
  <syslog_output>
    <server>172.17.22.3</server>
    <port>10516</port>
    <group>aa,bb,cc</group>
  </syslog_output>

b)

  <syslog_output>
    <server>172.17.22.3</server>
    <port>10516</port>
    <group>aa</group>
    <group>bb</group>
    <group>cc</group>
  </syslog_output>