[ossec-list] RV: Rule questions

Hello all, I just want this default rule: ... 5500 session opened for user Login session opened. authentication_success, ... to avoid alerts for CRON executions like: => CRON[23946]: (pam_unix) session opened for user root by (uid=0) I've tried 5501, 5502 C

[ossec-list] Ignoring 404s on a maven repository

If you run a maven repository you often get multiple 404s. This rule ignores them ... 31151 maven2 Ignore 404s on the maven repository -- regards Martin West