Re: [ossec-list] Not seeing changes in an updated cdb

2013-09-13 Thread Leonel Algaré
Hello! Sorry for revive this thread but. i'm having de same problem... cdb list dont update when I made changes in list. if at the moment any solution? El jueves, 19 de enero de 2012 16:35:48 UTC-3, dan (ddpbsd) escribió: Sorry for the delay. I'm seeing the same behavior. I'll try to look

Re: [ossec-list] Not seeing changes in an updated cdb

2013-09-13 Thread dan (ddp)
On Fri, Sep 13, 2013 at 11:38 AM, Leonel Algaré leonel.alg...@gmail.com wrote: Hello! Sorry for revive this thread but. i'm having de same problem... cdb list dont update when I made changes in list. if at the moment any solution? Depends on what the problem is. What steps have you

Re: [ossec-list] Not seeing changes in an updated cdb

2013-09-13 Thread Leonel Algaré
Thanks for the answer. First , Apologies for my bad english. I made a thread related to that. This is the information: Is list text file case sensitive? because i have that: Example: key1:sir KEY1:SIR key2:sir KEY2:SIR Sometimes logs arrives in uppercase or lowercase. My problem is: alert

Re: [ossec-list] Not seeing changes in an updated cdb

2012-01-19 Thread dan (ddp)
Sorry for the delay. I'm seeing the same behavior. I'll try to look at it later, but between moving and the code complexity it might be beyond me right now. On Tue, Jan 10, 2012 at 9:42 AM, Andy Jack andy.j...@caledoncard.com wrote: Hello Dan.  ossec-makelists does report that it is making a new

Re: [ossec-list] Not seeing changes in an updated cdb

2012-01-10 Thread Andy Jack
Hello Dan. ossec-makelists does report that it is making a new .cdb: * File lists/employees.cdb need to be updated The longest I was waiting was 3-5 minutes. On a related note, I was trying to figure out if there was a format for comments in the text version of the list. ossec-makelists

[ossec-list] Not seeing changes in an updated cdb

2012-01-09 Thread Andy Jack
Hello list! So I'm working on a cdb list of users so there can be rules that differentiate when a user on the list vs. not on the list logs in, as described here: http://www.ossec.net/doc/manual/rules-decoders/rule-lists.html After confirming that the list is being read and the two rules are