On Wed, Jul 13, 2016 at 2:49 AM, Arthur Hidalgo <[email protected]> wrote: > Yes. I make a copy of local_rules.xml. The first local_rules.xml has been > reappointed. And I name the copied file "local_rule.xml". > Then I compile and remove the second file named "local_rules.xml". I > reappointed the fist file "local_rules.xml. Yes I restarted OSSEC. When I > open "local_rules.xml", I have a message with ".cwp". >
Without samples I don't know what else to offer you. > Regards, > > > Le vendredi 8 juillet 2016 15:02:20 UTC+2, Arthur Hidalgo a écrit : >> >> Hi! >> >> we have a problem with ossec. When we modified the rules in the following >> file "local_rules.xml", the modification does not work. Ossec compiles but >> the modifications are not taken into account. >> Would you know why the rules aren't being modified? >> >> regards > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
