Yes that did it, thanks! :) Natassia
On Fri, Nov 18, 2016 at 9:42 AM, Daniel Cid <[email protected]> wrote: > It should work with spaces or commas: > > <weekday>monday, tuesday, friday</weekday> > > thanks, > > On Fri, Nov 18, 2016 at 1:24 PM, <[email protected]> wrote: > >> Is it possible to select multiple, discreet days using the weekday >> function? >> >> I can get the rule to run if I select a single day and it looks like I >> should be able to specify weekends or weekdays. What I would like to do is >> to specify certain days, in this case Sunday, Monday, Wednesday and >> Friday. I tried using the pipe to "or" them together (Sunday|Monday|etc.,) >> but that gives me "OSSEC analysisd: Testing rules failed. Configuration >> error. Exiting." when I restart. >> >> Is there a way to do this with a single <weekday> specification or will I >> have to write a composite rule? >> >> Natassia >> >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> For more options, visit https://groups.google.com/d/optout. >> > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
