On Fri, May 16, 2014 at 3:35 PM, Ashok <ashokkumari...@gmail.com> wrote: > I made it 10, but still its not working >
Did you restart the ossec processes on the manager? > > On Saturday, May 17, 2014 12:55:45 AM UTC+5:30, Ashok wrote: >> >> I tried to overwrite the predefined external storage detection code by >> including the following in local_rules.xml >> >> <rule id="532" level="0" overwrite="yes" > >> <if_sid>531</if_sid> >> <match>cdrom|/media|usb|/mount|floppy|dvd</match> >> <description>Detected external medias.</description> >> </rule> >> >> >> But its not detecting usb storage.. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
