ossec / ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
http://www.ossec.net
Other
4.33k stars 1.02k forks source link

Problem with decoders #2104

Open nomanuser opened 7 months ago

nomanuser commented 7 months ago

Hi, I tried to use the decoders in a command with srcip, username, the command is a simple script to test this, only haves: #!/bin/bash $1 >> test.txt $2 >> test.txt But when i see test.txt it haves add and -. I tried different things on expect but always return the same result.

atomicturtle commented 1 month ago

Not sure I follow your test case here. What are you trying to do?