Search found 1 match
- Wed Dec 18, 2019 11:05 am
- Forum: OSSEC
- Topic: Custom decoder not capturing parameter
- Replies: 0
- Views: 47798
Custom decoder not capturing parameter
Hi everybody, I was trying to create a custom decoder for logs generated by the audispd daemon. Since those are very similar to the ones from auditd daemon, with addition of a "node" element at the beginning, I started by copying the existing decoder for auditd, and then I changed it from:...