Hi Daniel, The alerts you changed to level 0 it isn't the same that you write some lines before, isn't it? You turn to 0 rule SID 100005 but the alert you show us has SID 1002.
For testing purposes try to deactivate (change to level 0) rule 1002 and check if it is still generating these alerts. El viernes, 13 de noviembre de 2015, 7:44:37 (UTC-8), Daniel Bray escribió: > > On Friday, November 13, 2015 at 10:33:04 AM UTC-5, Daniel Bray wrote: >> >> I'm waiting to see if it generates an alert. >>> >> >> > > Nope, issue remains. Very confusing. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
