You example and errors do not line up. You example would work as it matches hh:mm format. Could you check that ?
> On May 18, 2014, at 12:06 PM, "Nguyễn Văn Hớn" <[email protected]> wrote: > > How to set <time> in ossec. i have set <time>5:30 pm – 8:30 am</time> but it > have error > 2014/05/18 22:59:59 ossec-analysisd(1274): ERROR: Invalid configuration. > Element 'time': 6pm – 8:30am. > 2014/05/18 22:59:59 ossec-testrule(1220): ERROR: Error loading the rules: > 'local_rules.xml' > please help me ! > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
