hi James, > I have this in my rsyslog.conf: > Module (load="omprog") > *.* action(type="omprog" > binary="/usr/local/bin/sec.sh" > template="RSYSLOG_TraditionalFileFormat") > - > sec.sh contains: > #!/bin/bash > usr/bin/sec --conf=/etc/sec/sec.conf --notail --input=-
I just noticed that there is no slash in front of usr/bin/sec, and thus the file path is not absolute. If the actual script also has this typo, can you add the missing slash and check if this fixes the problem? kind regards, risto > > But I cannot seem to get log messages to actually get handled by sec. > > Any help will be appreciated. > > Thanks, > > James > > > ------------------------------------------------------------------------------ > WatchGuard Dimension instantly turns raw network data into actionable > security intelligence. It gives you real-time visual feedback on key > security issues and trends. Skip the complicated setup - simply import > a virtual appliance and go from zero to informed in seconds. > http://pubads.g.doubleclick.net/gampad/clk?id=123612991&iu=/4140/ostg.clktrk > > > > _______________________________________________ > Simple-evcorr-users mailing list > Simple-evcorr-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users > ------------------------------------------------------------------------------ WatchGuard Dimension instantly turns raw network data into actionable security intelligence. It gives you real-time visual feedback on key security issues and trends. Skip the complicated setup - simply import a virtual appliance and go from zero to informed in seconds. http://pubads.g.doubleclick.net/gampad/clk?id=123612991&iu=/4140/ostg.clktrk _______________________________________________ Simple-evcorr-users mailing list Simple-evcorr-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
