Hi all, I'm trying to disable all local logging on a standalone OSSEC server since any alerts will be forwarded on via syslog to a remote aggregation server (local firewall policies and a sufficiently complex network mean that I can't do this in the normal OSSEC client/server way.)
Is there a cunning flag I can set in the conf file which might achieve this, even if it's only partially? Thanks, Mike
