Skip to content

Commit 4b255a8

Browse files
committed
Add noalert from gaboroszkar in issue #287 in the ossec-docs repo
1 parent 90393d7 commit 4b255a8

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

manual/lids/rule_syntax.trst

+6
Original file line numberDiff line numberDiff line change
@@ -59,6 +59,12 @@ rule
5959
Used to supercede an OSSEC rule with local changes.
6060
This is useful to change the level or other options of rules included with OSSEC.
6161

62+
- *noalert*
63+
64+
Prevent the rule from triggering an alert.
65+
Further rule checks will not happen, except for rules specifically using this rule
66+
in an `<if_sid>` configuraiton.
67+
6268
.. _rule_match:
6369

6470
match

0 commit comments

Comments
 (0)