Hi Maxim, please check that ossec-logcollector process is running and reading that file. You can do
lsof /var/log/apache2/error.log If that is not the case there might be something wrong with the configuration (maybe a typo). If it is reading the logs, try enabling logall option on the OSSEC manager, to see if those get actually there. I hope that helps, Santiago. On Mon, Feb 8, 2016 at 7:23 AM, Maxim Surdu <[email protected]> wrote: > Dear community, > I am having a problem in OSSEC. I have configured the OSSEC client to > monitor the Apache and Nginx error.log > > <localfile> > <log_format>apache</log_format> > <location>/var/log/nginx/access.log</location> > </localfile> > > <localfile> > <log_format>apache</log_format> > <location>/var/log/nginx/error.log</location> > </localfile> > > <localfile> > <log_format>apache</log_format> > <location>/var/log/apache2/error.log</location> > </localfile> > > <localfile> > <log_format>apache</log_format> > <location>/var/log/apache2/access.log</location> > </localfile> > > in /var/log/apache2/error.log > logs are showed but not sended to server? any help/solutions? > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
