Hello, I want to log all urls visited,
I modified web_rules.xml to:
<group name="web,accesslog,">
<rule id="31100" level="0">
<category>web-log</category>
<description>Access log messages grouped.</description>
</rule>
<rule id="31108" level="3">
<if_sid>31100</if_sid>
<compiled_rule>is_simple_http_request</compiled_rule>
<description>URLs simple queries.</description>
<group>web,</group>
</rule>
</group>
I can restart the service fine but I don't see anything about at log.json
any help?
Best regards.
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
