The agent can only log to the central ossec server. From there you can forward logs to a central syslog server. Hope that helps.
-Shawn On Jul 13, 2012 3:50 PM, "carrothospital" <[email protected]> wrote: > So, I've been looking for a while and haven't found a straight > answer(maybe I just missed it), but can individual ossec agents forward > their logs to a syslog server instead of to an ossec server? I want to send > logs to a central logging server that's already in place. Is that possible? > Sorry if this has been answered before... >
