I have a server that any activity in the logs, i want to be given a different level than others. Is there a way I can call out that one server to be recognized as a higher alert level.
Example: If agent 002 has an audit or logon failure that is normally a level1, i want ossec to bump it to a level 7...also a level 2 bumped up to a level 8 and so on. - Derek Morris
