There is a little document feature in OSSEC called lists. It allows you to create a list of IPs for specific rules. I use then a lot.
Here is the link to the OSSEC to lists http://ossec-docs.readthedocs.io/en/latest/manual/rules-decoders/rule-lists.html Bill On Tuesday, March 27, 2018 at 8:19:25 AM UTC-4, [email protected] wrote: > > Hi, > > How to generate the rule or decoder specific host/ip. > > I'm try rule1 or decoder1 add "<location>ip_address</location>" but is not > work. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
