Actually, that didn't work out after all.. -----Original Message----- From: [email protected] [mailto:[EMAIL PROTECTED] Behalf Of Kevin Reiter Sent: Monday, November 26, 2007 10:20 AM To: [email protected] Subject: [ossec-list] Re: OSSEC v1.4 - Multiple Logs Definition Error
That seems to have done the trick, thanks! -----Original Message----- From: [email protected] [mailto:[EMAIL PROTECTED] Behalf Of Peter M. Abraham Sent: Friday, November 23, 2007 3:50 PM To: ossec-list Subject: [ossec-list] Re: OSSEC v1.4 - Multiple Logs Definition Error Greetings Kevin: While we do not have cause at present to take advantage of the multiple log method, I would recommend two tests for you to try: 1. Manually typing in the required format (to make sure no special characters were transferred from a copy and paste, try using a single log. 2. Try the following: <localfile> <log_format>syslog</log_format> <location>/var/log/current@</location> </localfile> Thank you.
