My contribution: <!-- Wed Apr 1 11:18:26 2015 91.126.130.4:63972 TLS: Username/Password authentication succeeded for username 'USERNAME' --> <decoder name="openvpn-success"> <prematch>Password authentication succeeded </prematch> <regex offset="after_prematch">^for username '(\S+)'</regex> <order>user</order> </decoder>
<!-- AUTH-PAM: BACKGROUND: user 'USERNAME' failed to authenticate: Authentication failure --> <decoder name="openvpn-pam-failed"> <prematch>AUTH-PAM: BACKGROUND: </prematch> <regex offset="after_prematch">^user '(\S+)' failed to authenticate</regex> <order>user</order> </decoder> This is the decoder for using the PAM authentication. Cheers El 01/04/15 a las 17:16, [email protected] escribió: > Hello Santiago, > Just because a lot of people use a certain product, doesn't mean it's > a good product. > The main reason people use open source is because its free. > anyway, I see great potential for OSSEC, but it's has drastically need > to be improved and more user user friendly > thank you for the link and I am relieved that you can manage it centrally > but the documentation tells me nothing else > for example, how can I read all information from a certain log file in > ossec? > so not just alerts, but all the information in a log (this log file > generates very few) > > > > > On Wednesday, April 1, 2015 at 4:51:07 PM UTC+2, Santiago Bassett wrote: > > OSSEC supports centralized configuration > management: > http://ossec-docs.readthedocs.org/en/latest/manual/agent/agent-configuration.html > > <http://ossec-docs.readthedocs.org/en/latest/manual/agent/agent-configuration.html> > > > Thousands of Open Source solutions are used daily in production > environments, so I assume Open Source is ready for business, but > maybe not for people that doesn't read the documentation... > > > -- > > --- > You received this message because you are subscribed to the Google > Groups "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected] > <mailto:[email protected]>. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
