ossec/ossec-hids — pull request #198 by reyjrar (2014-04-30 13:58:58+00:00)
Title: New Feature - Accumulator (Multiline logs with consistent IDs)

As detailed in this blog post [OSSEC-HIDS Accumulator](http://edgeofsanity.net/article/2012/11/26/ossec-hids-accumulator.html)

Running in production for >12 months, maybe closer to two years.