On Mon, Sep 2, 2013 at 4:09 AM, Pratap <[email protected]> wrote: > Thanks Dan and Michael , > > My Cisco Catalyst 3650 device is not able to send the log to syslog server > .However I am not getting alert from Ossec for device up/down either. >
I don't use agentless at the moment. Is there a rule for the device being down? > > On Fri, Aug 30, 2013 at 9:13 PM, dan (ddp) <[email protected]> wrote: >> >> On Tue, Aug 27, 2013 at 4:54 AM, Pratap <[email protected]> wrote: >> > Hi , >> > >> > I am not sure if this is possible to monitor "Cisco Catalyst 3560 Series >> > Switches". I have added it under agentless but unable to see any alert >> > from >> > the deveice. >> > >> >> The agentless support is more for configuration integrity checking. If >> you want to analyze the logs you must forward them via syslog to the >> OSSEC server. >> >> > We logged into the device using telnet, using web access. >> > >> > Is it possible to monitor Cisco Catalyst 3560 Series Switches? If yes >> > then >> > how can I get alert for login attempt. >> > >> > Each login details, login failure etc. >> > >> > -- >> > Regards, >> > Pratap >> > >> > -- >> > >> > --- >> > You received this message because you are subscribed to the Google >> > Groups >> > "ossec-list" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> > an >> > email to [email protected]. >> > For more options, visit https://groups.google.com/groups/opt_out. >> >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> For more options, visit https://groups.google.com/groups/opt_out. > > > > > -- > Regards, > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
