ossec/ossec-hids — pull request #434 by navtej (2014-11-12 10:11:40+00:00)
Title: Set matching child decoder in lf->decoder_info, if a child decoder matches.

If a child decoder regex matches, set the decoder in lf->decoder_info that child decoder. As of now the decoder is remains set to parent decoder.

This can potentially fix https://github.com/ossec/ossec-hids/issues/164