<remote> <connection>syslog</connection> <port>2514</port> <allowed-ips>192.168.11.1<allowed-ips> <local_ip>192.168.11.11</local_ip> </remote>
After config it It restart ossec but it doesn't show anything i look it at(/var/ossec/logs/archives/archives.log) On Friday, February 6, 2015 at 9:11:33 AM UTC+7, Network Infrastructure wrote: > > I have configured OSSEC to monitor my ASA 5520 but I cannot see anything > > In ASA 5520, I enable syslog server to send syslog to my OSSEC > > > In OSSEC, the /var/ossec/etc/ossec.conf, I configed: > > <ossec_config> > > <remote> > <connection>syslog</connection> > <allowed-ips>IP_OF_CISCO_DEVICE</allowed-ips> > </remote> > <global> > <logall>yes</logall> > </global> > > </ossec_config> > > Then I restart ossec services but I cannot see anything. > > > Help me please ... > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
