You could push logs through it and track the success/failure rate. If
you plan on using it in a server/agent configuration, have agents push
logs to the server. Track how many logs go in, and how many are
correctly detected.
This isn't a simple question, but all I have is that overly simplistic
answer at the moment.
> Thank you
> Miroslav
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to
ossec-list+...@googlegroups.com.
> For more options, visit
https://groups.google.com/d/optout.