Hey Chris, Well I think u can make some changes in the ossec.conf using the syslog_output tag. You can anytime foirward the logs to 2 OSSEC Managers. Here u will have to mention the port aswell. So wen u mention the port. Ensure that u have the same opened on the Firewall as well, if there's any.
Regards Tanishk On Fri, Jun 3, 2011 at 6:26 PM, Christopher Moraes <[email protected]>wrote: > Hi, > > I would like to check if anyone has tried configuring an OSSEC agent to > forward logs to 2 different managers simultaneously. > > Since OSSEC transports logs via UDP, we would like to have the logs > forwarded to 2 managers to reduce the risk of a log getting lost in > transport. Currently we have syslog-ng agents configured such that each > agent forwards the a log event to 2 syslog managers simultaneously. > > We are planning to replace the syslog-ng agents with ossec agents and are > looking for a similar feature. > > Regards, > Chris > > > -- Regards Tanishk Lakhaani
