Hi List,

it looks like, that ossec is igoreing my agent.conf.

But why?

My test is very simple:

<agent_config>
  <localfile>
  <location>/var/log/my.log</location>
  <log_format>syslog</log_format>
  </localfile>
</agent_config>

I have no file my.log , so I expected to get an error like:
ossec-logcollector ERROR: Unable to open file '/var/log/my.log'.

But it does't.
DIRECTORY="/var/ossec"
VERSION="v2.3"
TYPE="agent"

Best regards,
Mike

Reply via email to