[Ossec-list] Active-response

[pedrodrimel at gmail.com (Pedro Drimel Neto)]

Hi all,

I would to know when the active-response is called...

I unsertood that an active-responde is relative with a command but when this 
active-response is called ? from the rules ? what rules ?

Where do I specify that when a rule id number 'x' in syslog_rules.xml match 
I will tell active-responde 'x'.

Thanks a lot...

Congratulations for the project, I hope to help as possible.

[]'s

Pedro.