Hello, The ruleset psad_rules.xml which is included in the 3.0.0 version is not by default included in the ossec.conf file. When i add the the include: <include>psad_rules.xml</include> within the <rule></rule><!-- rules global entry --> I get the following error:
ossec-testrule: INFO: Reading local decoder file. rules_list: Category '1' not found. Invalid 'category'. It works by adding the rules to local_rules.xml, so that's no issue, but for convenience and also to learn if i've done something incorrect I would appreciate some help of the above issue. Kind regards, Fredrik -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
