[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ossec-list] Question

To: ossec-list@xxxxxxxxxxxxxxxx
Subject: [ossec-list] Question
From: Nicolas Arias <nicolas.arias@xxxxxxxxxxx>
Date: Tue, 06 Feb 2007 09:42:27 -0300
Content-transfer-encoding: 7bit
Organization: Globant

HI guys!

i have an AD server where some linux servers authenticate with samba.
The thing is that looks like theres some trouble in the linux server
library and its causing kerberos validation trobules in the AD server,
so i get Rule: 18152 fired (level 10) -> "Multiple Windows Logon
Failures." all the time.
I dont want to modify the priority of that rule, but i do want to make
it more flexible, so i dont get 300 alerts in 1 nigth.


Any ideas?

Cheers!

Follow-Ups:
- [ossec-list] Re: Question
  - From: Daniel Cid

References:
- [ossec-list] Matching questions
  - From: Mark Haney
- [ossec-list] Re: Matching questions
  - From: Nicolas Arias
- [ossec-list] Re: Matching questions
  - From: Daniel Cid

Prev by Date: [ossec-list] Re: Matching questions
Next by Date: [ossec-list] regex problem in OSSEC?
Previous by thread: [ossec-list] Re: Matching questions
Next by thread: [ossec-list] Re: Question
Index(es):
- Date
- Thread

OSSEC home | Main Index | Thread Index

OSSEC project: www.ossec.net.
Mailling list information: http://www.ossec.net/en/mailing_lists.html.