Has anyone had any experience monitoring HAproxy logs with OSSEC? (see http://haproxy.1wt.eu/ for details on HAproxy - in a nutshell, it's a high performance load balancer)
We're contemplating moving to it at work, but a definite prerequisite of it would be the ability of OSSEC to monitor its logs and act on intrusion attempts. As far as I've read, HAproxy can log to syslog, I'm just not sure what format it uses. Hopefully if there's an Apache style access.log somewhere then this wouldn't be too difficult I'd think... -- Thanks, Eric http://nixwizard.net
