Re: [ossec-list] I'd like to ignore these...

2014-08-25 Thread Steven Stern
; replace 11 with the next available ID if 11 is already used by > another rule. > > Hoping this helps. > > Valere > > From: Steven Stern [subscribed-li...@sterndata.com] > Sent: Friday, August 22, 2014 6:21 PM > To: ossec-

RE: [ossec-list] I'd like to ignore these...

2014-08-25 Thread Binet, Valere (NIH/NIA/IRP) [C]
From: Steven Stern [subscribed-li...@sterndata.com] Sent: Friday, August 22, 2014 6:21 PM To: ossec-list@googlegroups.com Subject: [ossec-list] I'd like to ignore these... What's the best way to get OSSEC to ignore this particular "error" in error_log

[ossec-list] I'd like to ignore these...

2014-08-23 Thread Steven Stern
What's the best way to get OSSEC to ignore this particular "error" in error_log? It's the result of .htaccess rules operating corrrectly, so I don't really need to get emails about it. I suspect that I need to tell it to non notifiy me on a rule 1002 if "AH01797" is in the text, but I'm not sure h