On Mon, Jul 1, 2013 at 3:47 PM, David Blanton <[email protected]> wrote: > >> >Your double quotes look odd, but a copy/paste the rule into vi worked >> fine for me. > > > Weird. Even when I copy everything from an older rule and paste, then modify > the xml fields I get an error. >
What are you using to make the changes? > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
