I tried, and logstash web gui didn’t seem to work as well – i.e. it kept crashing with out of memory errors. Plus I think it had to make a second copy of all the logs. . . Maybe I’m confused though.
-- James Pulver Information Technology Area Supervisor LEPP Computer Group Cornell University From: [email protected] [mailto:[email protected]] On Behalf Of ash kumar Sent: Friday, September 16, 2011 4:23 PM To: [email protected] Subject: Re: [ossec-list] ossec-wui BUG For what the WUI does, you can do that and then some with Logstash. Not really worth spending time on flogging the WUI in my humble opinion.
