Hi dan, and thank for your response! I've added a issue: https://bitbucket.org/jbcheng/ossec-hids/issue/67/add-support-for-json-log-file-decoder
greetings Sunny Am Donnerstag, 23. Januar 2014 19:12:31 UTC+1 schrieb dan (ddpbsd): > > On Thu, Jan 23, 2014 at 1:07 PM, SunboX <[email protected] <javascript:>> > wrote: > > I'm interested in this, too. Want to parse the ownCloud log file. > > > > Sample line: > > {"app":"OCP\\Share","message":"Sharing backend > > OCA\\Contacts\\Share\\Addressbook not registered, > > OCA\\Contacts\\Share\\Addressbook is already registered for > > addressbook","level":2,"time":"2014-01-23T17:59:34+00:00"} > > > > Please open an enhancement issue at > https://bitbucket.org/jbcheng/ossec-hids > This is definitely something we want to add support for. > > > Am Freitag, 25. Oktober 2013 19:14:35 UTC+2 schrieb carlopmart: > >> > >> Hi all, > >> > >> How can I parse json log format with ossec?? According to docs, the > >> more close logformat supported by ossec is multiline, but I don't see > >> how can I configure this ... > >> -- > >> CL Martinez > >> carlopmart {at} gmail {d0t} com > > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups > > "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an > > email to [email protected] <javascript:>. > > For more options, visit https://groups.google.com/groups/opt_out. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
