On Thu, Jan 2, 2014 at 6:10 PM, dan (ddp) <[email protected]> wrote: > > On Jan 2, 2014 5:52 PM, "Rich Rumble" <[email protected]> wrote: >> >> On Monday, December 30, 2013 12:01:53 PM UTC-5, dan (ddpbsd) wrote: >>> >>> Try with 1 hostname, and remove the asterisks. >> >> Doesn't work, still get the same alerts. Do I have to put the rules on the >> clients themselves, or remove those rules on the clients themselves? >> -rich >> > > I'll have to jump on a computer later to test. Rulea still do not belong on > the agents. Never have, never will. I'll try to add a faq entry on that. >
Oops, I can't seem to find the log sample. >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> For more options, visit https://groups.google.com/groups/opt_out. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
