That seems to have done the trick, thanks!
-----Original Message-----
From: [email protected] [mailto:[EMAIL PROTECTED]
Behalf Of Peter M. Abraham
Sent: Friday, November 23, 2007 3:50 PM
To: ossec-list
Subject: [ossec-list] Re: OSSEC v1.4 - Multiple Logs Definition Error
Greetings Kevin:
While we do not have cause at present to take advantage of the
multiple log method, I would recommend two tests for you to try:
1. Manually typing in the required format (to make sure no special
characters were transferred from a copy and paste, try using a single
log.
2. Try the following:
<localfile>
<log_format>syslog</log_format>
<location>/var/log/current@</location>
</localfile>
Thank you.
