On Thu, Feb 5, 2015 at 9:14 AM, Network Infrastructure <[email protected]> wrote: > Excuse me sir, Can you tell me how to configure the OSSEC manager to either > listen for syslog messages > itself, or my preferred method of using a syslog daemon to listen and > receive those messages. > > I don't know how to config it, help me please .... > >
To the /var/ossec/etc/ossec.conf on the manager add: <remote> <connection>syslog</connection> <allowed-ips>IP_OF_CISCO_DEVICE</allowed-ips> </remote> And restart the OSSEC processes http://ossec-docs.readthedocs.org/en/latest/syntax/head_ossec_config.remote.html > > On Thursday, February 5, 2015 at 4:37:30 PM UTC+7, Network Infrastructure > wrote: >> >> Hello everyone! >> Today I have a problem. When I was trying configure my ASA 5520 with OSSEC >> it doesn't, so can you tell me how to config it in detail? >> >> >> >> > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
