[ossec-list] Help with rule for Windows agent

2010-03-04 Thread Doug Burks
I'm having trouble getting a rule to fire for a Windows agent. I've written other Windows rules before and they work fine, but I can't figure out why this isn't working. Here's what shows up in the Windows System log: Printer HP Color LaserJet 8500 PS (from WORKSTATION) in session 2 was set. I a

Re: [ossec-list] Help with rule for Windows agent

2010-03-04 Thread dan (ddp)
On Thu, Mar 4, 2010 at 10:14 AM, Doug Burks wrote: > I'm having trouble getting a rule to fire for a Windows agent.  I've > written other Windows rules before and they work fine, but I can't > figure out why this isn't working. > > Here's what shows up in the Windows System log: > Printer HP Color