On Thu, Oct 18, 2012 at 12:03 AM, jigish thakar <[email protected]> wrote: > Can we place the ossec alerts in custom file as per the requirement? i.e. > not in default alert file (/var/ossec/logs/alerts/alerts.log) e.g I have > trendmicro logs coming on my sensor and these are very noisy. So i want to > place them in custom alert file and give a little rest to my default > alerts.log. > > Please let me know if its possible or not, or any workaround by which I can > achieve anything similar to this > >
There are no facilities to do this inside OSSEC.
