What's the best way to get OSSEC to ignore this particular "error" in error_log? It's the result of .htaccess rules operating corrrectly, so I don't really need to get emails about it.
I suspect that I need to tell it to non notifiy me on a rule 1002 if "AH01797" is in the text, but I'm not sure how to do that. OSSEC HIDS Notification. 2014 Aug 22 17:14:00 Received From: cumberland->/var/log/httpd/mywordpress.sterndata.com-error_log Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system." Portion of the log(s): [Fri Aug 22 17:14:00.115147 2014] [access_compat:error] [pid 16549] [client 93.120.14.206:55202] AH01797: client denied by server configuration: /var/www/mywordpress/wordpress/xmlrpc.php -- -- Steve -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.