Try following settings on cisco (asa) logging enable
logging trap notifications -- Eero 2015-03-24 22:09 GMT+02:00 Nhen Panha <panhan...@gmail.com>: > Hello sir! > > Today, I would like to ask you the problem between configuration Ossec and > Cisco devices. > > In cisco router and switch I config: > > logging on > logging host IP_OF_MY_OSSEC_SERVER > logging trap alerts > logging facility local7 > > In the Ossec manager: > > in the file ossec.conf, I add > > <ossec_config> > <remote> > <connection>syslog</connection> > <allowed-ips>IP_OF_CISCO_DEVICE</allowed-ips> > </remote> > <global> > <logall>yes</logall> > </global> > > </ossec_config> > > Then I restart the Ossec services but in the > file /var/ossec/logs/archives/archives.log > I didn't see anything. So help me please > > > Thank with best regard > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
