Hi Peter, Just use "syslog". In fact, for most applications that log one event per line, "syslog" is fine to use (and iis, squid, apache and a few other log_formats are just a link to syslog).
You only need a different format when the logs can be combined in more than one line per event (like Snort-full, mysql and postgresql). Thanks, -- Daniel B. Cid dcid ( at ) ossec.net On Thu, Dec 10, 2009 at 3:09 PM, Peter M. Abraham <[email protected]> wrote: > Greetings: > > What <log_format> do I use for Horde IMP log files? > > Is it syslog or is there a specific one for Horde IMP? > > Thank you. >
