Hi I have configured an ossec agent to read MySQL logs(both error log and query log), however, when I add the lines for the "generic query log" to the agent ossec.conf I continuously receive "Database notification success" on ossec-wui! Any help is appreciated.
-siamak 2008 Mar 20 17:32:42 Rule Id: 50105 level: 3 Location: (zorba) xx.xx.xx.xx->/var/lib/mysql/onion.log Database authentication success. MySQL log: 080320 16:32:41 7385 Connect [EMAIL PROTECTED] on 2008 Mar 20 17:32:42 Rule Id: 50105 level: 3 Location: (zorba) xx.xx.xx.xx->/var/lib/mysql/onion.log Database authentication success. MySQL log: 080320 16:32:40 7384 Connect [EMAIL PROTECTED] on 2008 Mar 20 17:32:40 Rule Id: 50105 level: 3 Location: (zorba) xx.xx.xx.xx->/var/lib/mysql/onion.log Database authentication success. MySQL log: 080320 16:32:39 7383 Connect [EMAIL PROTECTED] on ....
