Just create rules in /var/ossec/rules/local_rules.xml On Sep 20, 2012 1:46 PM, "tstoneami" <[email protected]> wrote:
> Hi folks; > > I have email alerts coming to me for errors in the system log, but if > someone can point me in the right direction (doc?) on how to also alert on > specific information entries I would greatly appreciate it. I am missing > something here... > > Thanks!! > > Troy > >
