Correct. Look at the ossec.conf on the agent. There should be some logfiles
configured by default. Look for <localfile> entries.
On Jun 25, 2011 1:50 PM, "SystemAli" <[email protected]> wrote:
> Dan:
>
> that means all the logs to be monitored have to be entered in the agent in
> the following location :-/var/ossec/etc/ossec.conf ?
>
> On Sat, Jun 25, 2011 at 6:09 PM, dan (ddp) <[email protected]> wrote:
>
>> /var/ossec/etc/ossec.conf
>> On Jun 25, 2011 8:27 AM, "SystemAli" <[email protected]> wrote:
>> > I need to log a cpanel agents log to my ossec server, Which file on the
>> > agent do i have to modify so that i can tell it to send additional log
>> files
>> > there ?
>> >
>> > --
>> > "Want to be a leader? Wash the Dishes When Nobody Else
>> > Will<http://thesash.me/wash-the-dishes-when-nobody-else-will>
>> > "
>>
>
>
>
> --
> "Want to be a leader? Wash the Dishes When Nobody Else
> Will<http://thesash.me/wash-the-dishes-when-nobody-else-will>
> "
