Hey guys, so I really like the new dynamic decoders. But how can I use a dynamic field to trigger a rule?
Lets say I extract md5 into a dynamic field with a decoder <order>md5</order> I can't use the tag <md5>XXXXXXX</md5> into any rule. How am I supposed to check the value I extracted with the decoder? Thanks -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/9c8e9d2f-5bb4-4142-a1e2-7e4fc24fa25f%40googlegroups.com.
