Thanks
Works now!
____________________________________________
Michael Barrett | Information Security Analyst - Lead | Mortgage Guaranty Insurance Corporation
270 E. Kilbourn Ave. | Milwaukee, WI 53202 USA | ( 1.414.347.6271 | 7 1.888.601.4440 | * [email protected]
This message is intended for use only by the person(s) addressed above and may contain privileged and confidential information. Disclosure or use of this message by any other person is strictly prohibited. If this message is received in error, please notify the sender immediately and delete this message.
| From: | "dan (ddp)" <[email protected]> |
| To: | [email protected] |
| Date: | 03/16/2012 03:01 PM |
| Subject: | Re: [ossec-list] Turn off rule? |
| Sent by: | [email protected] |
On Fri, Mar 16, 2012 at 3:37 PM, Michael Barrett
<[email protected]> wrote:
>
>
> I think your reply got corrupted in my email server? Was it here where
> the red box is?
>
That wasn't a corruption, it was pointing out the error in the log
messages you posted. It was meant as a hint. I also (probably) fixed
the config for you further down the email.
Instead of dragging this out more though, rules need to be in groups.
The rule at the top of your rule file was not inside of the <group
name="whatever"> tag, it was all by itself. The error message I tried
to draw attention to pointed that out.
>
> ____________________________________________
> Michael Barrett | Information Security Analyst - Lead | Mortgage Guaranty
> Insurance Corporation
> 270 E. Kilbourn Ave. | Milwaukee, WI 53202 USA | ( 1.414.347.6271 | 7
> 1.888.601.4440 | * [email protected]
>
> This message is intended for use only by the person(s) addressed above and
> may contain privileged and confidential information. Disclosure or use of
> this message by any other person is strictly prohibited. If this message is
> received in error, please notify the sender immediately and delete this
> message.
