To verify the message are processed recursivly I update /var/log/messages using:
echo "Jan 23 04:47:09 TEST TEST ERROR" >> /var/log/messages This resulted in a number of messages, with increasing lenght. Jan 23 04:47:09 TEST TEST ERROR Jan 23 11:56:39 ossec-server ossec-alert Jan 23 04:47:09 TEST TEST ERROR Jan 23 11:56:49 ossec-server ossec-alert Jan 23 11:56:39 ossec-server ossec-alert Jan 23 04:47:09 TEST TEST ERROR Jan 23 11:56:59 ossec-server ossec-alert Jan 23 11:56:49 ossec-server ossec-alert Jan 23 11:56:39 ossec-server ossec-alert Jan 23 04:47:09 TEST TEST ERROR Jan 23 11:57:09 ossec-server ossec-alert Jan 23 11:56:59 ossec-server ossec-alert Jan 23 11:56:49 ossec-server ossec-alert Jan 23 11:56:39 ossec-server ossec-alert Jan 23 04:47:09 TEST TEST ERROR Jan 23 11:57:19 ossec-server ossec-alert Jan 23 11:57:09 ossec-server ossec-alert Jan 23 11:56:59 ossec-server ossec-alert Jan 23 11:56:49 ossec-server ossec-alert Jan 23 11:56:39 ossec-server ossec-alert Jan 23 04:47:09 TEST TEST ERROR Jan 23 11:57:29 ossec-server ossec-alert Jan 23 11:57:19 ossec-server ossec-alert Jan 23 11:57:09 ossec-server ossec-alert Jan 23 11:56:59 ossec-server ossec-alert Jan 23 11:56:49 ossec-server ossec-alert Jan 23 11:56:39 ossec-server ossec-alert Jan 23 04:47:09 TEST TEST ERROR Jan 23 11:57:39 ossec-server ossec-alert Jan 23 11:57:29 ossec-server ossec-alert Jan 23 11:57:19 ossec-server ossec-alert Jan 23 11:57:09 ossec-server ossec-alert Jan 23 11:56:59 ossec-server ossec-alert Jan 23 11:56:49 ossec-server ossec-alert Jan 23 11:56:39 ossec-server ossec-alert Jan 23 04:47:09 TEST TEST ERROR Jan 23 11:57:49 ossec-server ossec-alert Jan 23 11:57:39 ossec-server ossec-alert Jan 23 11:57:29 ossec-server ossec-alert Jan 23 11:57:19 ossec-server ossec-alert Jan 23 11:57:09 ossec-server ossec-alert Jan 23 11:56:59 ossec-server ossec-alert Jan 23 11:56:49 ossec-server ossec-alert Jan 23 11:56:39 ossec-server ossec-alert Jan 23 04:47:09 TEST TEST ERROR -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
