A lot of sound advice in this article. One thing I often tell people is if they're not ready to commit all of their free time for 3+ months…writing a book isn't for them.
The title says it all. Very cool.
Cool little web tool to check what OSSEC would do to a received log. Try pasting a few in and see what happens.