Hi Scott,
Yes I did configure the "database output", otherwise we wouldn't see the
actions in mysql.log, these are the parameters I used:
<database_output>
<hostname>localhost</hostname>
<username>ossecuser</username>
<password>password</password>
<database>ossec</database>
<type>mysql</type>
</database_output>
There must be something wrong with mysql, is ther something (timeout or
maxConnection) that I should change ?
Le mercredi 9 mai 2012 18:35:32 UTC+2, Scott VR a écrit :
>
>
>
>
>
> On May 9, 2012, at 6:16 AM, secatoor wrote:
>
> > Is there something specific I have to tell OSSEC to make it stop
> > logging into log files and log into mysql database ?
> >
>
> Did you set database_output and appropriate credential, etc parameters in
> ossec.conf?
>
> See http://www.ossec.net/doc/manual/output/database-output.html
>
> It sounds like you completed "Enabling database support", but missed
> "Enabling database output in configuration" perhaps.
>
> ScottVR
>
> > I tried starting it again and again but it still does not work fine (I
> > even tried from scratch, with no previous installation)...
> >
> > If someone has any idea, you're welcome ;)
> > Thanks
>