From c488f913eb660c8bf5d78f8ab85c869eb37f7391 Mon Sep 17 00:00:00 2001 From: Landon Lengyel Date: Thu, 10 Oct 2024 08:45:18 -0600 Subject: [PATCH] Update custom.rst You have to restart the logtest tool to actually get it to be aware of changes to the files. --- source/user-manual/ruleset/rules/custom.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/source/user-manual/ruleset/rules/custom.rst b/source/user-manual/ruleset/rules/custom.rst index 1238671489..dc3d9b0172 100644 --- a/source/user-manual/ruleset/rules/custom.rst +++ b/source/user-manual/ruleset/rules/custom.rst @@ -70,7 +70,7 @@ Perform the following steps on the Wazuh server. firedtimes: '1' mail: 'False' - To test your rules using ``/var/ossec/bin/wazuh-logtest`` tool, saving the changes made to the rule files is enough. However, you need to restart the Wazuh manager to generate alerts based on these changes. + To test your rules using ``/var/ossec/bin/wazuh-logtest`` tool, saving the changes made to the rule file and restarting the logtest tool is enough. However, you need to restart the Wazuh manager to generate alerts based on these changes. #. Restart the Wazuh manager to apply the changes: