Greetings,
I have a brief question I am hoping someone can answer. I am using OSSEC to look at a tomcat webapps directory that has a number of portals in it. I have a log file in every portal that I would like to ignore. The path is the same with the exception of the portal name. I tried using a wildcard character...but that doesn't seem to work. Could someone provide an example on how to do this? I have read the docs, but cannot find exactly what I am looking for. The entry I put in the ossec.conf file is <ignore>/bin/apache-tomcat-5.5.27/webapps/portal_*.com/WEB-INF/log</igno re> What should the correct tag be here? Thank you. Kirk Frankovich Systems Administrator 847.427.5223 - Direct 847.489.4717 - Cell [email protected] Fort Dearborn Company 1530 Morse Ave Elk Grove Village, IL 60007 -- Confidentiality Notice: This e-mail, including attachments, may include confidential and/or proprietary information, and may be used only by the person or entity to which it is addressed. If the reader of this e-mail is not the intended recipient or his or her authorized agent, the reader is hereby notified that any dissemination, distribution, copying or taking any action in reliance upon this information is prohibited. If you have received this e-mail in error, please notify the sender by replying to this message and delete this e-mail immediately. This message was scanned by ESVA and is believed to be clean.
