On Tue, Oct 16, 2012 at 9:56 AM, rezgui mohamed <[email protected]> wrote: > Dear support i configure ossec to recive the logs of tomcat > so i do that > > #vim /var/ossec/etc/ossec.conf > > i add > > <localfile> > <log_format>multi-line:2 </log_format> > <location>/var/tomcat/logs/catalina.out</location> > </localfile> > > then > > #/var/ossec/bin/ossec-control restart > > but i don't recieve any logs > > help please
How do you know you aren't receiving any logs? Do you have logall enabled (on the ossec server of course)? If so, do you see any tomcat logs in archives.log? If not, turn it on. Do you see any tomcat logs in archives.log?
