[ossec-list] Re: Custom decoder issue

2015-04-09 Thread AMINE.E
I don't believe that this simple decoder doesn't work for my custom log: <*decoder* name="fakeinc_custom"> <*prematch*>^Fakeinc: for this log: *Mar 26 10:56:36 small-VirtualBox small: Fakeinc: service for: toto@10.0.0.2 Failed*After performing some test, i have found that *program_n

[ossec-list] Re: Custom decoder issue

2015-04-07 Thread AMINE.E
i have tested with *program_name* tag added instead of prematch, it worked. but with *prematch* it is not working. Can you please test with me ? i don't know why it is not working for me ! <*decoder* name="fakeinc_custom"> <*prematch*>^Fakeinc: and my custom log is : *Mar 26 10:56:36