Not without code changes. You would have to modify the file src/os_csyslogd/alert.c to remove the log[0] from the final message.
Thanks, -- Daniel B. Cid http://dcid.me On Fri, Mar 30, 2012 at 11:09 AM, C. L. Martinez <[email protected]> wrote: > Hi all, > > I have configured an ossec server to forward data to a third party > device via syslog. But instead to forward all log data I would like to > forward only the alert description. Is it possible to do this with > ossec?? > > Thanks.
