Well, if you want to see the AV alerts in OSSEC, first you need to send the logs to OSSEC (using *localfile *or via syslog). Then, create decoders and rules.
Regards. On Friday, September 9, 2016 at 9:47:34 AM UTC+2, [email protected] wrote: > > AV logs situated in .db file > cant show it > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
