Hello Guys!!! Heres the thing:
i have a centralized log server, and im loggin each box to a separated directory. I want ossec to parse the different log files in each directory. Theres a "generic" way to specify something like a recursive inclusion in the ossec config file?. Since i have multiple messages, mail, secure etc etc files (in different dirs) i dont really know how to config ossec to support this. Thanks!! Cheers!