Heya Folks, I've been looking for the docs that explain the difference between the use of the '|" and the "," when specifying the id numbers within a rule. I cant find anything that explains the use.
Could someone explain to me the differences by way of use? or provide a link that I may have missed? Two arbitrary use case EXAMPLES of what I am after is: A.) Within sid 18103, look for id 12345 followed by 12346, followed by 12347 B.) Within sid 18103, look for id 11234 and 11254 Thank you! R.B. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
