I would configure the whats in /var/ossec. I am not sure where those other directories came from unless it was something that a previous test release did prior to your latest installation.

At this time I believe there is no way to tell ossec to place the log files some where else. However you could mount a samba partition to NAS/SAN or where ever you planned it to those folders. Not ideal but would work. What are your thoughts on moving the files? Is it a space issue, security concern, or another concern. Let us know and maybe this is something that could be added in the future.

On 9/22/06, Dennis Borkhus-Veto <[EMAIL PROTECTED]> wrote:

I was working on getting my Pix and syslog working and when I went to change the ossec config I found that I have a /var/ossec directory and a /var/ossec/ossec and /var/ossec/ossec/ossec directorys .

I have just the other day installed the latest version.  This is not usually a huge problem except I don't know which one to configure.

 

Second is there a way to have the Ossec log files on the server go to a different location?

 

Sincerely

Dennis Borkhus-Veto
Systems Administrator
MEE Material Handling L.L.C
[EMAIL PROTECTED]

 


Reply via email to