+ <rule id="700" level="0">
+ <category>ossec</category>
+ <decoded_as>ossec-logcollector</decoded_as>
+ <description>Logcollector Messages Grouped</description>
+ </rule>
+
+ <rule id="701" level="0">
+ <if_sid>700</if_sid>
+ <match>INFO: </match>
+ <description>Ignore informational messages (usually at startup)</description>
+ </rule>
+