thanks for your answer, i recieve the logs on /var/ossec/logs/archives/archives.log .
but on decoder .xml Ossec don't have any rules to parse tomcat logs Best regards
thanks for your answer, i recieve the logs on /var/ossec/logs/archives/archives.log .
but on decoder .xml Ossec don't have any rules to parse tomcat logs Best regards