class= in analysis.cfg

Can you show the relevant lines in analysis.cfg?


CLASS=DIH
        PROC syscheck 1 2 red
        DISK /var/TKLC/ixp 95 99
        DISK %^/pdu_. 95 99
        LOG /var/log/messages ERROR
        LOG /var/log/messages %abnormally|ALERT|WARNING|NOTICE|failed COLOR=yellow
        LOG /var/TKLC/log/syscheck/fail_log FAILURE
        LOG /var/log/secure FAIL COLOR=yellow