Can we place the ossec alerts in custom file as per the requirement? i.e. 
not in default alert file (/var/ossec/logs/alerts/alerts.log) e.g I have 
trendmicro logs coming on my sensor and these are very noisy. So i want to 
place them in custom alert file and give a little rest to my default 
alerts.log.

Please let me know if its possible or not, or any workaround by which I 
can achieve anything similar to this


Reply via email to