i have tested with *program_name* tag added instead of prematch, it worked.
but with *prematch* it is not working.
Can you please test with me ? i don't know why it is not working for me !
<*decoder* name="fakeinc_custom">
<*prematch*>^Fakeinc: </*prematch*>
</*decoder*>
and my custom log is :
*Mar 26 10:56:36 small-VirtualBox small: Fakeinc: service for:
[email protected] <[email protected]> Failed*
Thanks
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
