On Tue, Mar 27, 2018, 8:19 AM <[email protected]> wrote: > Hi, > > How to generate the rule or decoder specific host/ip. > > I'm try rule1 or decoder1 add "<location>ip_address</location>" but is not > work. >
Yeah, that won't work. Are you trying to match any log with that IP? That would be hard to do, not sure it's possible. More information on what you're trying to accomplish might help. -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
