What's the best way to get OSSEC to ignore this particular "error" in
error_log? It's the result of .htaccess rules operating corrrectly, so I
don't really need to get emails about it.

I suspect that I need to tell it to non notifiy me on a rule 1002 if
"AH01797" is in the text, but I'm not sure how to do that.

OSSEC HIDS Notification.
2014 Aug 22 17:14:00

Received From:
cumberland->/var/log/httpd/mywordpress.sterndata.com-error_log
Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system."
Portion of the log(s):

[Fri Aug 22 17:14:00.115147 2014] [access_compat:error] [pid 16549]
[client 93.120.14.206:55202] AH01797: client denied by server
configuration: /var/www/mywordpress/wordpress/xmlrpc.php

-- 
-- Steve

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to