-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Jul 23, 2010, at 12:56 PM, Nikolaidis Fotis wrote:
> Hello.
>
> Is it possible for ossec to monitor the logs of a directory without writing a
> rule explicitly for every file ?
>
> For example i have
>
> DirA
> DirB DirC DirD
> 100Logs 200 Logs N logs
You can use globs, so something like this would work :
<localfile>
<log_format>syslog</log_format>
<location>/DirA/*/*.log</location>
</localfile>
> Regards, Fotis
- ---------------------------
Jason 'XenoPhage' Frisvold
[email protected]
- ---------------------------
"Any sufficiently advanced magic is indistinguishable from technology."
- - Niven's Inverse of Clarke's Third Law
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.14 (Darwin)
iEYEARECAAYFAkxKbo0ACgkQ8CjzPZyTUTS9DACfRN4aTBrBS5HnP/NqVkOWak2/
GrYAoIcKQsz/gyQkJ7tV1DcUReA7adgz
=oh9c
-----END PGP SIGNATURE-----
