On Thu, Feb 5, 2015 at 9:46 AM, Network Infrastructure <[email protected]> wrote: > I'm not sure where can I see the syslog message? > If correct, what it look like? >
OSSEC does not record all log messages sent to it by default. It only records alerts. So if there is an alert you can see it in the alerts.log. If you want to see all of the log messages sent to OSSEC, add <logall>yes</logall> to the <global> section of the ossec.conf and restart the OSSEC processes. These messages would be saved to /var/ossec/logs/archives/archives.log http://ossec-docs.readthedocs.org/en/latest/syntax/head_ossec_config.global.html?highlight=logall#element-logall > Can I see it at web gui? > > > On Thursday, February 5, 2015 at 4:37:30 PM UTC+7, Network Infrastructure > wrote: >> >> Hello everyone! >> Today I have a problem. When I was trying configure my ASA 5520 with OSSEC >> it doesn't, so can you tell me how to config it in detail? >> >> >> >> > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
