On Tue, Oct 16, 2012 at 10:29 AM, rezgui mohamed <[email protected]> wrote: > > > On Ossec server has to parse the logs of tomcat, because i receive the logs > on /var/ossec/logs/archives/archives.log from tomcat > >
If the tomcat logs are making it into archives.log, then OSSEC is getting the logs.
