Hello, I want to log all urls visited, I modified web_rules.xml to: <group name="web,accesslog,"> <rule id="31100" level="0"> <category>web-log</category> <description>Access log messages grouped.</description> </rule>
<rule id="31108" level="3"> <if_sid>31100</if_sid> <compiled_rule>is_simple_http_request</compiled_rule> <description>URLs simple queries.</description> <group>web,</group> </rule> </group> I can restart the service fine but I don't see anything about at log.json any help? Best regards. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.