On Fri, Jul 7, 2017 at 4:15 AM, Kazim Koybasi <kazim.koyb...@gmail.com> wrote: > Yes OSSEC mentioning about log files and says analyzing log file. I tried > with apache log format and without logformat settings and results is > same.What could be a workaround for that? >
Provide a log sample of a log you expect to fire an alert. > On Thursday, 6 July 2017 23:37:55 UTC+3, Kazim Koybasi wrote: >> >> I added config below to etc/shared/agent.conf in ossec-server home >> directory but there is no alerts in server.What could I need with this >> configuration? >> >> >> <agent_config name="agent4"> >> <localfile> >> <log_format>apache</log_format> >> <location>/var/log/httpd/site/site_log</location> >> </localfile> >> </agent_config> >> > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.