On Tue, Aug 20, 2013 at 4:49 PM, Kareem abd el fatah <[email protected]> wrote: > HI Team > > i have program in remote server that's creates HTML output logs. and i want > OSSEC to read the logs from this html files > > what i did is i shared the folder which contain the HTML logs , then mount > it in the OSSEC server ( Cenots OS ). > > Now i am able to see the shared folder and the html files in my OSSEC > server. so now how can i make OSSEC read any update in the mounted Html > files and send it throw mail >
You should start by complaining to the developer, that's a horrible way to write logs. Create <localfile> blocks in the ossec.conf reading the log files. You can set them up as syslog, but you'll probably have to write decoders and rules to do anything with the logs. > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
