Trying to send "archives" to a syslog server for archival, and it can't handle all the extraneous code.
On Tuesday, June 17, 2014 2:14:57 PM UTC-7, Michael Starks wrote: > > On 2014-06-17 15:46, Janelle wrote: > > Hi all, > > > > Just a question -- I want to logall - and that part is easy, BUT - > > would anyone know of a way to NOT log the "commands" that are being > > monitored? > > They kind of mess up the database since command results can be > > multi-line and more. I want to just log all the "syslog" style > > messages. > > This can't be done without modifying the source. What's the ultimate > goal? Are you trying to parse archives.log with another tool? > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
