We support Lotus Domino logs in the NCSA format, so you can specify them as "syslog" or "apache" **.
**The log format options syslog, apache, iis or squid are all read the same way (one line at a time). The only time you need to change it is with snort-full, nmapg or windows event log, since each one has a specific function to read them... **log_format is only used by logcollector (telling it how to read the file), and does not change the way the message is analyzed. Hope it helps. -- Daniel B. Cid dcid ( at ) ossec.net On 1/24/07, Black CryptoKnight <[EMAIL PROTECTED]> wrote:
What should I specify as the log format in ossec.conf for monitoring the the Lotus Domino web logs? ________________________________ Want to start your own business? Learn how on Yahoo! Small Business.
