On 26.09.2013 05:26, [email protected] wrote:
Any idea what I might miss here?

It's not working because you're matching on pptpd and that doesn't appear in the log line. Look at what ossec-logtest returns and use anything in the actual log line from that perspective for your match.

--

--- You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to