Attribute for search in ossec cookbook.