Search found 1 match

by mtassinari
Wed Dec 18, 2019 11:05 am
Forum: OSSEC
Topic: Custom decoder not capturing parameter
Replies: 0
Views: 44181

Custom decoder not capturing parameter

Hi everybody, I was trying to create a custom decoder for logs generated by the audispd daemon. Since those are very similar to the ones from auditd daemon, with addition of a "node" element at the beginning, I started by copying the existing decoder for auditd, and then I changed it from:...