On Tue, Mar 6, 2018 at 2:36 AM, Mostafa HoseiniMehr <m.hoseinim...@gmail.com> wrote: > Hi my friends. > I want to save all web access logs in ossec logs. > i have enabled the IIS (and apache) logging in /var/ossec/etc/ossec.conf > file. > like this: > > <localfile> > <location>C:\inetpub\logs\LogFiles\W3SVC2\*.log</location> > <log_format>iis</log_format> > </localfile> > > Now, I want to save all access logs (200 OK logs) but ossec saves only 404 > and other error logs. > Thanks. >
Turn on the logall option (https://ossec.github.io/docs/syntax/head_ossec_config.global.html?highlight=logall#element-logall) and the logs should be saved to archives.log > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
