Hi scott,
Yes I configured the database output also, like this:
<database_output>
<hostname>localhost</hostname>
<port>3306</port>
<username>ossecuser</username>
<password>password</password>
<database>ossec</database>
<type>mysql</type>
</database_output>
Like I said, you really can see that OSSEC sends SQL requests into mysql
(viewable in mysql.log).
But they don't appear in the database... Is there a kind of time out or
other parameter I should modify ?
On Thursday, May 10, 2012 1:54:04 AM UTC+2, Scott VR wrote:
>
>
>
>
>
> On May 9, 2012, at 11:35 AM, Scott VR wrote:
>
> >
> >
> >
> >
> > On May 9, 2012, at 6:16 AM, secatoor wrote:
> >
> >> Is there something specific I have to tell OSSEC to make it stop
> >> logging into log files and log into mysql database ?
> >>
> >
> > Did you set database_output and appropriate credential, etc parameters
> in ossec.conf?
> >
> > See http://www.ossec.net/doc/manual/output/database-output.html
> >
> > It sounds like you completed "Enabling database support", but missed
> "Enabling database output in configuration" perhaps.
> >
> > ScottVR
> >
> >> I tried starting it again and again but it still does not work fine (I
> >> even tried from scratch, with no previous installation)...
> >>
> >> If someone has any idea, you're welcome ;)
> >> Thanks
>
