Commits

Anonymous committed f7f582d Draft

Properly ignoring keepalives.

Comments (0)

Files changed (1)

src/analysisd/alerts/log.c

 void OS_Store(Eventinfo *lf)
 {
 
-    if(strcmp(lf->location, "ossec-keepalive") == 0)
+    if(strstr(lf->location, "->ossec-keepalive") != NULL)
     {
         return;
     }
+
     fprintf(_eflog,
             "%d %s %02d %s %s%s%s %s\n",
             lf->year,