ddp wrote:
> Not sure if this is what you're looking for or not, but check out the
> following link
> (specifically the local_ip option):
> http://www.ossec.net/main/manual/configuration-options/
>
> On Wed, Oct 28, 2009 at 5:39 AM, Holger Gläß <[email protected]> wrote:
>
>> hi
>>
>> question about config of the ossec-syslog server part.
>>
>>
>> how can i bind the ossec-syslog server to an ip ?
>>
>> holger
>>
>>
>>
hi
that's it.
but i diden't found howto setup seperate files for the remote servers.
or write ossec all received messages in one logfile.
for examle i look an funktion like
<localfile>
<srcip>remote ip</srcip>
<log_format>syslog</log_format>
<location>/var/log/auth.log</location>
</localfile>
holger
