Rules and DecodersΒΆ Testing OSSEC rules/decoders Testing using ossec-logtest CDB List lookups from within Rules Use cases Syntax for Lists Create Custom decoder and rules Adding a File to be Monitored Create a Custom Decoder Historical Directory path loading of rules and decoders Use case Details Rules Classification Rules Group How OSSEC matches rules Overview Parent and child rules Level and load order Decoder category matters Seeing the order for a real log line