Seems you can forward alerts to a syslog server: http://www.ossec.net/dcid/?p=139
Not sure about the actual ossec.log entries. On Wed, Dec 29, 2010 at 12:34 PM, Saket <[email protected]> wrote: > Hi, > > I am trying to forward the OSSEC logs to a syslog server. > > I know it stores the logs in /ossec/logs/ossec.log file and > /ossec/logs/alerts/alerts.log > > But, is there a way to send these logs to a syslog server? > > Thanks, > Saket
