Hi Paco, If you can forward some log samples to us, we can help you out with the rules.
Thanks, -- Daniel B. Cid dcid ( at ) ossec.net On Jan 15, 2008 8:38 PM, xu Feng <[EMAIL PROTECTED]> wrote: > > > > Hi > " There is support for JBoss logs?" > > No default rules exist to analyse JBoss logs,but we can do it by ourselves. > > I think the file " Log Analysis using OSSEC by Daniel B. Cid" at > http://www.ossec.net/ossec-docs/auscert-2007-dcid.pdf > will help a lot in understanding the mechanism and processing of OSSEC,and > eventually you can develop your own decoder and rules. > I am now using OSSEC to monitor and analyse JBoss logs. > > Best Wishes, > Yours, > Xu Feng > > > -----邮件原件----- > 发件人: ossec-list@googlegroups.com [mailto:[EMAIL PROTECTED] 代表 Paco Avila > 发送时间: 2008年1月15日 23:40 > 收件人: ossec-list@googlegroups.com > 主题: [ossec-list] Support for JBoss logs? > > > > There is support for JBoss logs? > > Thanks in advance! > -- > GIT CONSULTORS > > www.git.es > > Tel: +34 971 498 310 > Fax: +34 971 496 189 > > C/ Francesc Rover, 2B. > 07003 Palma de Mallorca – Illes Balears (España) > > >
