Hello everybody,
I just want to send my postfix logs (/var/log/mail.log) to my alienvault
server. I inserted a record into /opt/ossec/etc/ossec.conf file ;
<localfile>
<log_format>syslog</log_format>
<location>/var/log/mail.log</location>
</localfile>
But I cant see nothing in SIEM. It's a default installation and postfix is
included in the Config / Rules.
What I'm doing wrong ? Could you please help me ?
Thank you.
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.