I seem to have the same problem. Can someone help on this? Thanks. Endy
On Mar 25, 1:26 am, Randy <randy.h.sm...@tn.gov> wrote: > I am new to OSSEC. I made changes to local_rules.xml, which seemed to > work. When I when back and made other changes that should have negated > some of the original ones, they never seemed to take effect. I have a > rule that is showing up in alert.log that was in the original changed > local_rules file, that does not now exist anywhere in it. The original > changes were made over a week ago and the second round the next day. I > have restarted OSSEC on the "main" server several times. > > What am I missing that will allow the rule changes to take effect? > > Thanks in advance. > > Randy
