Re: [ossec-list] OSSEC log analysis settings for apache access/error.log

2017-07-06 Thread dan (ddp)
On Jul 6, 2017 4:38 PM, "Kazim Koybasi"  wrote:

I added config below to etc/shared/agent.conf in ossec-server home
directory but there is no alerts in server.What could I need with this
configuration?




apache
/var/log/httpd/site/site_log





Does that system have apache running?
Did you restart ossec?
Check the ossec.log to ensure the file is being monitored.
Are there any logs that should be triggering alerts present in the log file?



-- 

---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[ossec-list] OSSEC log analysis settings for apache access/error.log

2017-07-06 Thread Kazim Koybasi
I added config below to etc/shared/agent.conf in ossec-server home 
directory but there is no alerts in server.What could I need with this 
configuration?




apache
/var/log/httpd/site/site_log



-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.