, October 10, 2007 8:12 PM
To: ossec-list@googlegroups.com
Subject: [ossec-list] Re: Syslog-NG with OSSEC Questions!
To piggy-back Daniel's response, this is exactly what I use it for. I
don't use the agents at all, just a local installation with the daemon
pointed to the syslog-ng
PROTECTED]
Behalf Of Daniel Cid
Sent: Tuesday, December 18, 2007 8:26 PM
To: ossec-list@googlegroups.com
Subject: [ossec-list] Re: Syslog-NG with OSSEC Questions!
Hi Kevin,
For your case, I would suggest using the strftime formats instead of
/*/**. Because the logs change everyday,
you need
Of [EMAIL PROTECTED]
Sent: Wednesday, October 10, 2007 8:12 PM
To: ossec-list@googlegroups.com
Subject: [ossec-list] Re: Syslog-NG with OSSEC Questions!
To piggy-back Daniel's response, this is exactly what I use it for. I
don't use the agents at all, just a local installation
Hi Wilson,
OSSEC can definitely monitor your logs and generate alerts on real
time. That's why it
was written for :)
Thanks,
--
Daniel B. Cid
dcid ( at ) ossec.net
On 10/10/07, Wilson Lai [EMAIL PROTECTED] wrote:
Dear ALL,
I have now installed the Syslog-NG server for
To piggy-back Daniel's response, this is exactly what I use it for. I
don't use the agents at all, just a local installation with the daemon
pointed to the syslog-ng hosts directory.
Daniel Cid wrote:
Hi Wilson,
OSSEC can definitely monitor your logs and generate alerts on real
time.