Query on rule for Supported languages

14 views
Skip to first unread message

sumit soni

unread,
Apr 20, 2020, 5:30:48 PM4/20/20
to ossec-list
Hi ,
I have systems with different languages and wondering if  I create a rule to match English logs  can that rule also work for logs from other language OS or not .
For .e.g if create a rule whc=ich mach with following string  3 incorrect password attempts  and apply this rule on a System With Japanese language  would it work  and OSSEC would able to translate match string from one language to other ??
Or do i have to create new rule for specific language characters to match

Regards
Sumit

dan (ddp)

unread,
Apr 21, 2020, 7:06:33 AM4/21/20
to ossec...@googlegroups.com
OSSEC looks at the characters and strings it is passed. OSSEC doesn't
translate the message between languages, I think you'd need to match
the strings in each language you want to support.

> Regards
> Sumit
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/67b4a34a-a1a3-485c-8140-087b9042bab1%40googlegroups.com.
Reply all
Reply to author
Forward
0 new messages