On Tue, Aug 19, 2014 at 1:08 PM, dan (ddp) <[email protected]> wrote: > On Tue, Aug 19, 2014 at 1:07 PM, Brian Kellogg <[email protected]> wrote: >> First of thanks for all the help. I really appreciate it. >> >> Looking at the log I see "^M" after each line which is a Windows carriage >> return I believe. Can I match on the ^M in any way? If not, is there a way >> for OSSEC to remove these before logging. >> > > No clue, I avoid Windows. >
I do want to note that it's generally easier for me to help with decoders when I have log samples to work with. >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
