There was a major iaaue with the windows decoder in 2.9.0. Grab the decoders feom MASTER or 2.9.1 branch and try those
On Apr 3, 2017 12:59 PM, "Charles Profitt" <algorithm....@gmail.com> wrote: I have checked the agent and server versions and they are 2.9.0. I am getting all my alerts from Windows as rule 1002. I am curious if this is a known issue for 2.90 or if there is something else I should check. Thanks, -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
