Hi Brian,

good starting point..  thanks for your time and hint..

All the best.

Il giorno lunedì 14 gennaio 2019 15:00:45 UTC+1, Brian Candler ha scritto:
>
> I would be inclined to trying removing the <active-reponse> 
> <disabled>no</disabled> </active-response> block entirely.
>
> But really, for support of ossim you're best asking on the AlienVault 
> forums: https://www.alienvault.com/forums/ - scroll down to "OSSIM (OPEN 
> SOURCE)"
>
> This is because the XML file you're editing is an ossim file, not an ossec 
> one.
>

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to