*[RESOLVED]* It's my fault. I wrote my decoder with the log that I copied from ossec wui. But there are more spaces between "error" and ": Warning" on monit.log and alerts.log
- On ossec wui: [CEST Jun 10 11:54:17] error : Warning: Client '80.70.20.10' supplied unknown user 'monit' accessing monit httpd - In alerts.log: [CEST Jun 10 11:54:17] error : Warning: Client '80.70.20.10' supplied unknown user 'monit' accessing monit httpd -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
