ok, the problem is that ossec rotates logs every midnight, and chmod is 
740, so have to deal with that.
cheers

On Tuesday, May 6, 2014 12:01:09 PM UTC+1, Denis wrote:
>
> I was trying to configure everything "Joshua" way, and i see all data is 
> coming into stdin{}, but when i switch to elasticsearch index,  index is 
> empty.
> how to debug why data is not coming into index? is there any more debug 
> keys available?
>
> thank you
>

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to