Hi, while running in server mode you can monitor the server (like you are running in local mode) and process syslog sent from external sources. I think this setup might provide the functionality you're looking for.
Kind Regards, Wim On Wed, Dec 9, 2009 at 3:16 AM, Fahim Abbasi <[email protected]> wrote: > Hi All, > > I'd like to know if OSSEC can parse logs from external sources whilst > running in local mode? > > Im quite keen on exploiting log processing and event correlation capabilites > of OSSEC. Any pointers on this will be highly appreciated. > > > Cheers, > -Fahim > -- Wim Remes Security Afficionado
