On Tue, Oct 16, 2012 at 10:34 AM, rezgui mohamed <[email protected]> wrote: > thanks for your answer, > i recieve the logs on /var/ossec/logs/archives/archives.log . > > but on decoder .xml Ossec don't have any rules to parse tomcat logs > > Best regards
Create decoders for it. Mail them to the list when you're done. :)
