It worked for me on a non standard port: only the order is different
in my ossec.conf, but I dont' think this is a problem:
<database_output>
<hostname>x.x.x.x</hostname>
<username>ossec</username>
<password>yyyy</password>
<database>ossec</database>
<port>3307</port>
<type>mysql</type>
</database_output>
Before this I also had to introduce some little change in OSSEC
source, because our default is autocommit=no.
After compiling, obviously I executed:
ossec-control enable database
Best regards
Giovanni
On 26 Ott, 16:57, ash kumar <[email protected]> wrote:
> I am trying to log to a Mysql Database using a nonstandard port. I
> tried the following configuration adding <port> on a hunch.
>
> <database_output>
> <hostname>192.168.2.30</hostname>
> <port>3310</port>
> <username>ossec_u</username>
> <password>123xyz</password>
> <database>ossec_db</database>
> <type>mysql</type>
> </database_output>
>
> I am able to restart OSSEC without any errors, but I do not see
> traffic going to the database.
>
> Have I used the right keywords or is it not possible to send to a
> mysql database on any port other than 3306?
>
> Thanks and regards
>
> Ash
