On Tue, Oct 14, 2014 at 3:43 AM, <[email protected]> wrote: > yes,ossec-dbd it's work no problem,i modfiy some bug ossec for > postgresql.but the tables of "signature" no data,i don't konw how to import > rule data into this tables. >
Extend ossec-dbd to have that feature. There's currently no way to do it (that I know of), so you have to figure it out yourself. We'd welcome patches if you come up with something good. > 在 2014年10月13日星期一UTC+8下午11时37分26秒，dan (ddpbsd)写道： >> >> On Mon, Oct 13, 2014 at 11:35 AM, <[email protected]> wrote: >> > yes,alert is Normal insertinto the database。but if i want wirte WUI for >> > ossec,can not acquire rule description。。 >> > >> >> Then work on ossec-dbd first. :) >> >> >> > 在 2014年10月13日星期一UTC+8下午8时11分47秒，dan (ddpbsd)写道： >> >> >> >> On Mon, Oct 13, 2014 at 5:02 AM, <[email protected]> wrote: >> >> > >> >> > Hi,ALL >> >> > >> >> > >> >> > i use posegresql database for ossec,but i look the tables >> >> > "signature" is null,so how do i import all rules into "signature" >> >> > >> >> > >> >> >> >> Perhaps that functionality doesn't exist yet. Are there alerts in the >> >> database? If yes, that's pretty much the extent of the database >> >> support AFAIK. >> >> >> >> > >> >> > >> >> > >> >> > -- >> >> > >> >> > --- >> >> > You received this message because you are subscribed to the Google >> >> > Groups "ossec-list" group. >> >> > To unsubscribe from this group and stop receiving emails from it, >> >> > send >> >> > an email to [email protected]. >> >> > For more options, visit https://groups.google.com/d/optout. >> > >> > -- >> > >> > --- >> > You received this message because you are subscribed to the Google >> > Groups >> > "ossec-list" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> > an >> > email to [email protected]. >> > For more options, visit https://groups.google.com/d/optout. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
