Merge tag 'upstream/2.7'
[ossec-hids.git] / contrib / logtesting / 7 / res
diff --git a/contrib/logtesting/7/res b/contrib/logtesting/7/res
new file mode 100644 (file)
index 0000000..33e0039
--- /dev/null
@@ -0,0 +1,16 @@
+**Phase 1: Completed pre-decoding.
+       full event: 'MySQL log: 060516 22:38:46 mysqld ended'
+       hostname: 'melancia'
+       program_name: '(null)'
+       log: 'MySQL log: 060516 22:38:46 mysqld ended'
+
+**Phase 2: Completed decoding.
+       decoder: 'mysql_log'
+
+**Phase 3: Completed filtering (rules).
+       Rule id: '50120'
+       Level: '12'
+       Description: 'Database shutdown messge.'
+**Alert to be generated.
+
+