The reason why I do not use the user is because there is no such a field in use inside ACIDDB. I think that tweaking the code to add whatever field you need should be easy enough.
On 5/4/07, Michael Starks <[EMAIL PROTECTED]> wrote:
I'd like to have a user field as part of the ossecbase database. I won't actually be using it for BASE, so having the user available will make my MySQL queries much more meaningful. I know next to nothing about Perl, but took a look at the ossec2mysql.pl script, anyway. From the best I can tell, it captures the user name but does not insert it into the database. Was that simply because there was no good place in BASE to put it? How can I modify the script so that the user is added as a record with each event? Thanks in advance.
