Re: [ossec-list] OSSEC 2.8.3 - AR scripts host-deny.sh and pf.sh appear to be writing logs to wrong file

2016-07-04 Thread dan (ddp)
On Thu, Jun 30, 2016 at 6:32 PM, Kevin Branch wrote: > Hi folks, > > I was gearing up to start monitoring the OSSEC server and agent AR logs when > I ran into this apparent log path inconsistency in certain AR scripts. > > As I understand, the OSSEC AR log path for

[ossec-list] OSSEC 2.8.3 - AR scripts host-deny.sh and pf.sh appear to be writing logs to wrong file

2016-06-30 Thread Kevin Branch
Hi folks, I was gearing up to start monitoring the OSSEC server and agent AR logs when I ran into this apparent log path inconsistency in certain AR scripts. As I understand, the OSSEC AR log path for Linux is: /var/ossec/logs/active-responses.log It appears that there are a few references to