how can I get ossec to log to syslog file instead of ossec.log how can I send alerts to syslog file in addition to email?
I tried
<syslog_output>
<server>127.0.0.1</server>
</syslog_output>
but in the start up logs, I dodn't see the "forwarding" line.
