ok, the problem is that ossec rotates logs every midnight, and chmod is
740, so have to deal with that.
cheers
On Tuesday, May 6, 2014 12:01:09 PM UTC+1, Denis wrote:
>
> I was trying to configure everything "Joshua" way, and i see all data is
> coming into stdin{}, but when i switch to elasticsearch index, index is
> empty.
> how to debug why data is not coming into index? is there any more debug
> keys available?
>
> thank you
>
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.