Yes. I make a copy of local_rules.xml. The first local_rules.xml has been reappointed. And I name the copied file "local_rule.xml". Then I compile and remove the second file named "local_rules.xml". I reappointed the fist file "local_rules.xml. Yes I restarted OSSEC. When I open "local_rules.xml", I have a message with ".cwp".
Regards, Le vendredi 8 juillet 2016 15:02:20 UTC+2, Arthur Hidalgo a écrit : > > Hi! > > we have a problem with ossec. When we modified the rules in the following > file "local_rules.xml", the modification does not work. Ossec compiles but > the modifications are not taken into account. > Would you know why the rules aren't being modified? > > regards > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
