I have talked to the supporter for the DDP and they suggest netconsole to be able to get kernel logs even if the machine has crashed.
Does Ossec work with netconsole? Here is the message from the supporter: *What I suggested to extend logging with the Linux 'netconsole' feature. That are kernel messages send out over UDP and also work during a kernel crash (till panic where all stops).* -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
