Re: [ossec-list] syslog_output question

2017-07-11 Thread Robert B
That's perfect, exactly what I needed to know! Thank you! On Tuesday, July 11, 2017 at 3:58:37 AM UTC-4, Victor Fernandez wrote: > > Hi Robert, > > OSSEC should take these settings independently: > >- Configuration A will send alerts with level 8 or higher. >- Configuration B will send

Re: [ossec-list] syslog_output question

2017-07-11 Thread Victor Fernandez
Hi Robert, OSSEC should take these settings independently: - Configuration A will send alerts with level 8 or higher. - Configuration B will send alerts with level 4 or higher (including alerts sent by the former setting) belonging to these groups. So you'll receive duplicate alerts.

[ossec-list] syslog_output question

2017-07-10 Thread Robert B
This was a little unclear to me after reading the documenation and searching around...pardon if it's been asked and answered, I simply have not found it. We have a single server we want to send syslog output to, however, we also want to have different levels for some alerts. Would it be as