OSSEC log & prelude-lml rule

Vladimir na <[email protected]> Thu, 03 Mar 2011 10:50:16 +0300
Newsgroups gmane.comp.security.ids.prelude.user
Message-ID <[email protected]>
Hello!
I have OSSEC logs in this format:
something1
timestamp
something2
log entrie

something
timestamp 
something 
log entrie

...etc.				
Tell me please, how I can attach timestamp to the log entries? Give an example please. 
Thank you!


_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-technologies.com/mailman/listinfo/prelude-user