Hey all,

So I tried adding a log file for OSSEC to monitor in Windows
(proprietary application log) and when I try using asterisk to match
multiple files, it doesn't seem like it's able to:

<localfile>C:\logs\*.txt</localfile>
<log_format>syslog</log_format>

It just seems like the asterisk is being disregarded. I am able to get
the date literals to work however - "%d%m%y" yields the date as
expected.

Am I supposed to use another character besides Asterisk, or regex if I
want to match multiple logs in a Windows dir?
I tried this on 2.6 and 2.5.1 and neither seem to work.

Reply via email to