Dear support, on the agent i add only this line on ossec.conf to send me all logs of tomcat server to server OSSEC?
<localfile>
<log_format>multi-line:2 </log_format>
<location>/var/tomcat/logs/catalina.out</location>
</localfile>
i add the key generate by the server and restart the ossec agent i .
thats all to recieve the logs of tomcat on my server
Best regards
