Yes，You can ,but you must install ossec server for decrypted the logs. 1.install ossec server. 2.set ossec.conf like this
<ossec_config> <global> <logall>yes</logall> </global> </ossec_config> 3.the logs are stored in /var/ossec/logs/archives/archives.log and rotated daily 在 2014年4月9日星期三UTC+8上午8时37分35秒，Ash Windy写道： > > Hi > I'm newcomer. > Ossec has many great functions to help us improvement security but i don't > want to use ossec server. I already have other log system. > > I tried to use ossec agent to send syslog but it just can used encrypted > channel. > > question: > how can i use ossec agent to send syslog? i need use ossec agent to > monitor log files and File Integrity checking. > > thanks > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
