First, OSSEC Rocks!
 
Second, I would like to configure OSSEC to parse my web logs from our reverse proxy. The reverse proxy we use does not support the OSSEC agent. I will however FTP the web logs to the OSSEC server. So...
 
If I have the following directory structure (for example):
 
/var/log/proxyftp/domain1
/var/log/proxyftp/domain2
...
 
How can I configure OSSEC to parse the logs in these various directories and a specified time?
 
Warm Regards,
 
 
 
John R. McKean
Sr. Systems Security Administrator
Oregon State Lottery
(503) 540-1462
BEGIN:VCARD
VERSION:2.1
X-GWTYPE:USER
FN:McKean, John
TEL;WORK:540-1462
ORG:;Information Technology
TEL;PREF;FAX:540-1390
EMAIL;WORK;PREF;NGW:[EMAIL PROTECTED]
N:McKean;John
TITLE:Sr. Systems Administrator
END:VCARD

Reply via email to