<% node["ossec"]["rules"].sort_by{|k,v| k.to_i}.each do |id,params| headers = "" if params.has_key?('head') params[:head].sort.each do |key, value| headers += " " + key + "=\"" + value + "\"" end end -%> > <% if params.has_key?('body') params[:body].sort.each do |key, value| if not key.eql?('hostname_search') -%> <<%= key %>><%= value %>> <% end end end if params.has_key?('tags') params[:tags].sort.each do |tag| -%> <<%= tag %> /> <% end end if params.has_key?('info') params[:info].sort.each do |key, value| -%> <%= value %> <% end end -%> <% end -%>