[ossec-list] Multiple agent_id for one active response

[C. L. Martinez]

Hi all,

 Is it posible to assign multiple agent_id for one active reponse only? Example:

<active-response>
    <command>firewall-drop</command>
    <location>defined-agent</location>
    <agent_id>003,004</agent_id>
    <level>7</level>
    <timeout>86400</timeout>
    <repeated_offenders>2880,4320,5760</repeated_offenders>
  </active-response>

Thanks.

-- 
Greetings,
C. L. Martinez

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.