[ossec-list] Monitoring a remote syslogserver but sending the action to an agent

[Niklas Larsson]

Hi,

I am moving around my system a bit and want to send all logs to a remote 
syslog to reduce disk access, running the hosts on shared storage. To 
make the ossec agent to be able to get the info i have setup a pipe on a 
ramdisk and are feeding the relevant logs via syslog to ossec.

But i would like to use the logs on the remote server instead, how can i 
make ossec to send the action responses to the right agent? I have the 
ip of the agent in the remote syslog logs.

/niklas